tocsin

Debian/stunnel: medium 5.4

A Server-Side Request Forgery (SSRF) bypass vulnerability exists in “stunnel” 5.79 and lower when configured in SOCKS proxy mode. This flaw allows a client to bypass intended localhost restrictions by

Action: Upgrade stunnel to 3:5.80-1 or later.

Affected

introducedfixedlast affected
03:5.80-1-

Fixed versions

3:5.80-1

Sources

published · modified · JSON