Threats tagged 'ghsa-mjfw-8c8c-xr6h'

1 threat

Threats tagged 'ghsa-mjfw-8c8c-xr6h'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.5%	CVE-2026-54048Apache Impala · Server-Side Request Forgery (SSRF) Medium5.3EPSS 0.5%2026-09-09CVE Database V5CVE-2026-54048 Apache Impala versions 2.0.0 through 4.5.1 contain a server-side request forgery (SSRF) vulnerability. This flaw allows an attacker to specify a table property with an avro.schema.url pointing to an HTTP or file URI, causing Impala to issue GET requests to internal endpoints. The responses may be exposed through parsing error messages. The issue is fixed in version 4.5.2. EPSS 0.5%Vulnerability Apache Software Foundation #cwe-918 #ghsa-mjfw-8c8c-xr6h	CVE Database V5	2026-09-09

Showing 1–1 of 1 result