Unscored CVE-2018-9920 EUVD-2018-21512GHSA-ghrm-c5px-rwm2

Server side request forgery exists in the runtime application in K2 smartforms 4.6.11 via a modified hostname in an https://*/Identity/STS/…

Published May 24, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

Server side request forgery exists in the runtime application in K2 smartforms 4.6.11 via a modified hostname in an https://*/Identity/STS/Forms/Scripts URL.

References

20180522 K2 smartforms runtime application - 4.6.11 SSRF mailing-list