Vulnerabilities > Sandstorm
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2018-02-06 | CVE-2017-6201 | Server-Side Request Forgery (SSRF) vulnerability in Sandstorm A Server Side Request Forgery vulnerability exists in the install app process in Sandstorm before build 0.203. | 8.1 |
| 2018-02-06 | CVE-2017-6200 | Information Exposure vulnerability in Sandstorm Sandstorm before build 0.203 allows remote attackers to read any specified file under /etc or /run via the sandbox backup function. | 6.5 |
| 2018-02-06 | CVE-2017-6199 | Improper Authentication vulnerability in Sandstorm A remote attacker could bypass the Sandstorm organization restriction before build 0.203 via a comma in an email-address field. | 9.8 |
| 2018-02-06 | CVE-2017-6198 | Resource Exhaustion vulnerability in Sandstorm The Supervisor in Sandstorm doesn't set and enforce the resource limits of a process. | 6.5 |