Threats tagged 'ghsa-v56v-3qfh-cch5'

A server-side request forgery (SSRF) vulnerability exists in DLP on-prem extensions version 11.13.1 and earlier. The vulnerability arises because the file Prefix parameter in the OpenEventEvidenceFile.do endpoint accepts arbitrary UNC paths without validation. This causes the server to attempt to open attacker-controlled file paths, leading Windows to resolve hostnames and initiate SMB authentication to attacker-controlled hosts.