Description
In MITRE SAF Heimdall 2.11.6 through 2.13.x before 2.14.0, an SSRF issue allows remote attackers to access internal network resources via the Tenable proxy endpoint. This occurs in apps/backend/src/tenable/tenable.controller.ts.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MITRE | Heimdall | 2.11.6 – < 2.14.0 | 2.14.0 |