Description
WPO WebPageTest 19.04 allows SSRF because ValidateURL in www/runtest.php does not consider octal encoding of IP addresses (such as 0300.0250 as a replacement for 192.168).
Unscored
CVE-2019-12161
EUVD-2019-3810GHSA-x8xm-hqh8-g7pw
WPO WebPageTest 19.04 allows SSRF because ValidateURL in www/runtest.php does not consider octal encoding of IP addresses (such as 0300.025…
Published May 17, 2019 · Updated Aug 4, 2024 · Assigned by mitre