CVE-2017-7553

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2017-7553

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-7553.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2017-7553

Downstream

RHSA-2017:2674

Published

2017-09-29T01:34:50.407Z

Modified

2026-03-14T09:26:32.213380Z

Severity

6.3 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CVSS Calculator

Summary

[none]

Details

The external_request api call in App Studio (millicore) allows server side request forgery (SSRF). An attacker could use this flaw to probe the network internal resources, and access restricted endpoints.

References

Affected packages

Git /

Affected ranges

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-7553.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "4.4.3"
            }
        ]
    }
]