Description (CNA)
In MITRE SAF Heimdall 2.11.6 through 2.13.x before 2.14.0, an SSRF issue allows remote attackers to access internal network resources via the Tenable proxy endpoint. This occurs in apps/backend/src/tenable/tenable.controller.ts.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| MITRE / Heimdall | affected 2.11.6 before 2.14.0 |
CWE
CWE-918
References
- https://github.com/mitre/heimdall2/security/advisories/GHSA-g9vx-2rpf-gpch
- https://github.com/mitre/heimdall2/commit/b6a9cdb4fc01f96aaa1a77cc27d1d449b485937b
- https://github.com/mitre/heimdall2/releases/tag/v2.14.0
ADP enrichment
No English description supplied.