U.S. Dept Of Defense · Report #382048
Server-Side Request Forgery (SSRF)
Validstatus
mediumseverity
10upvotes
2 Dec 2019disclosed
How it was found
Hi,
I've found a Server-Side Request Forgery (SSRF)
Steps to reproduce:
- start listening on your server
- navigate to http://██████/help/ACPS.htm#http://$yourserver:$port
- you will get the request
██████
Impact
Server-Side Request Forgery (SSRF) Attack