Threats tagged 'ghsa-3hr9-mmwr-hp4x'

IBM CockroachDB PostgreSQL for IBM VPC versions 26.2.0 through 26.2.3, 25.4.0 through 25.4.12, and 25.2.0 through 25.2.20 contain a server-side request forgery (SSRF) vulnerability. An authenticated attacker could exploit this flaw to send unauthorized requests from the affected system. This may enable network enumeration or assist in launching further attacks. The vulnerability has a medium severity rating with a CVSS score of 5.4. No public exploits or patches are currently documented.