Threats tagged 'ghsa-f5vq-p2v5-96j9'

Zilliz Attu versions from 2.6.5 up to but not including 3.0.0 contain a Server-Side Request Forgery (SSRF) vulnerability in the Playground feature. This vulnerability arises from improper validation of unsafe equivalence in input, allowing proxying of requests to private IP addresses. The CVSS 3.1 base score is 4.0, indicating medium severity. There is no indication of active exploitation in the wild. No official patch or remediation details are provided in the available data.