Threats Tagged 'ghsa-68r5-9hpg-7qw9'

OpenDJ DSMLv2 SOAP gateway versions prior to 5.1.2 allow unauthenticated remote attackers to perform server-side request forgery (SSRF), local file reads, and unbounded memory consumption leading to denial of service (DoS). This is due to dereferencing attacker-supplied anyURI values without proper allowlisting, egress filtering, or size limits. The vulnerability is fixed in version 5.1.2 by disabling anyURI dereferencing by default, enforcing an http/https allowlist, blocking loopback and private addresses, refusing redirects, capping read sizes, and requiring authentication by default.