CVE-2024-0440 — SSRF - file:// unsanitized access to underlying host files
Attacker, with permission to submit a link or submits a link via POST to be collected that is using the file:// protocol can then introspect host files and other relatively sto…
Published: 2024-02-25 · CVSS: 9.6 · CVSS 3.0
Attacker, with permission to submit a link or submits a link via POST to be collected that is using the file:// protocol can then introspect host files and other relatively stored files.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7