Description (CNA)
Two unauthenticated diagnostic endpoints allow arbitrary backend-initiated network connections to an attacker‑supplied destination. Both endpoints are exposed with permission => 'any', enabling unauthenticated SSRF for internal network scanning and service interaction. This issue affects OpenSupports: 4.11.0.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| OpenSupports / OpenSupports | affected 4.11.0 |
CWE
CWE-918
References
ADP enrichment
No English description supplied.