Threats tagged 'ghsa-qqgw-pc7q-fjhx'

IBM WebSphere Application Server Liberty versions 17.0.0.3 through 26.0.0.10 contain a server-side request forgery (SSRF) vulnerability in the Admin Center deploy validation endpoint. This vulnerability allows an attacker with low privileges to induce the server to make unintended requests. The CVSS score is 4.3, indicating a medium severity impact primarily affecting confidentiality. No public exploits or known active exploitation have been reported. No patch or remediation details are currently provided.