Maven/io.github.microcks:microcks CVE-2023-48910: critical 9.8
Microcks contains a Server-Side Request Forgery (SSRF) via the component /jobs and /artifact/download
Action: Upgrade io.github.microcks:microcks to 1.17.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.17.1 | - |
Fixed versions
| 1.17.1 |
Sources
- osv: GHSA-gqj2-324p-vx73
- https://nvd.nist.gov/vuln/detail/CVE-2023-48910
- https://gist.github.com/b33t1e/2a2dc17cf36cd741b2c99425c892d826
- https://github.com/microcks/microcks
- https://github.com/orgs/microcks/discussions/892
CVE-2023-48910 · published · modified · JSON