Description (CNA)
A flaw has been found in miurla morphic up to 0.4.5. This impacts the function fetchHtml of the file /api/advanced-search of the component HTTP Status Code 3xx Handler. This manipulation causes server-side request forgery. The attack is possible to be carried out remotely. The exploit has been published and may be used.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| miurla / morphic | affected 0.4.0; affected 0.4.1; affected 0.4.2; affected 0.4.3; affected 0.4.4; affected 0.4.5 |
CWE
CWE-918
References
- https://vuldb.com/?id.323828
- https://vuldb.com/?ctiid.323828
- https://vuldb.com/?submit.645509
- https://github.com/miurla/morphic/issues/670
ADP enrichment
No English description supplied.
No references supplied.