CVE-2021-27770 in Sametime Proxy
Zusammenfassung
von MITRE • 13.05.2022
The vulnerability was discovered within the “FaviconService”. The service takes a base64-encoded URL which is then requested by the webserver. We assume this service is used by the “meetings”-function where users can specify an external URL where the online meeting will take place.
If you want to get best quality of vulnerability data, you may have to visit VulDB.