Vulnerabilities > CVE-2020-17386 - Server-Side Request Forgery (SSRF) vulnerability in Cellopoint Cellos 4.1.10
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
NONE Availability impact
NONE Summary
Cellopoint Cellos v4.1.10 Build 20190922 does not validate URL inputted properly. With cookie of an authenticated user, attackers can temper with the URL parameter and access arbitrary file on system.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| OS | 1 |