Threats tagged 'ghsa-jr8q-q76f-qjgh'

OpsTree REMS versions up to 1.0.0 have a server-side request forgery (SSRF) vulnerability that allows authenticated users to make the backend server connect to arbitrary destinations via the database Test Connection feature. This can be exploited by setting a database entry's host and port to internal or attacker-controlled addresses, enabling probing of internal hosts and ports accessible from the REMS server.