Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Improve][Manager] Spring Web vulnerable to Open Redirect or Server Side Request Forgery #9735

Closed
1 of 2 tasks
dockerzhang opened this issue Feb 27, 2024 · 1 comment · Fixed by #9790
Closed
1 of 2 tasks
Assignees
Labels
Milestone

Comments

@dockerzhang
Copy link
Contributor

dockerzhang commented Feb 27, 2024

Description

Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a open redirect attack or to a SSRF attack if the URL is used after passing validation checks.

this issue was fixed in 5.3.32, bump to this version could solve this.

InLong Component

InLong Manager

Are you willing to submit PR?

  • Yes, I am willing to submit a PR!

Code of Conduct

@dockerzhang dockerzhang mentioned this issue Feb 27, 2024
6 tasks
@dockerzhang dockerzhang added this to the 1.12.0 milestone Feb 27, 2024
@XiaoYou201
Copy link
Contributor

I would like to work on this issue

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants