CVE-2017-7553

Published: Sep 29, 2017Modified: May 13, 2026

6.3

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Exploitability: 2.8 / Impact: 3.4

Source: NVD

Description

The external_request api call in App Studio (millicore) allows server side request forgery (SSRF). An attacker could use this flaw to probe the network internal resources, and access restricted endpoints.

Affected (1)

Products: Redhat: Mobile Application Platform

Redhat

1 product

Mobile Application Platform

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Redhat Mobile Application Platform	Up to 4.4.3

Related CWEs

CWE-918

Server-Side Request Forgery (SSRF)

The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

References (6)

https://access.redhat.com/errata/RHSA-2017:2674

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2017:2675

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1478792

Source: secalert@redhat.com

Issue TrackingThird Party Advisory

https://access.redhat.com/errata/RHSA-2017:2674

Source: af854a3a-2127-422b-91ae-364da2661108

https://access.redhat.com/errata/RHSA-2017:2675

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=1478792

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party Advisory

Timeline

No history available yet.