| शीर्षक | orionsec (project owner of Orion-ops) Orion-ops (server component) <= master commit 5925824997a3109651bbde07460958a7be249ed1 Server-Side Request Forgery (SSRF) |
|---|
| विवरण | The Orion-ops machine connectivity test endpoints accept arbitrary destinations from any authenticated account. Because MachineInfoServiceImpl uses those parameters to initiate SSH connections without validation, an attacker can coerce the management server into connecting to internal hosts and learn whether the ports are reachable, effectively providing an SSRF primitive. |
|---|
| स्रोत | ⚠️ https://github.com/Xzzz111/exps/blob/main/archives/orion-ops-ssrf-1/report.md |
|---|
| उपयोगकर्ता | sh7err04 (UID 92493) |
|---|
| सबमिशन | 10/11/2025 12:30 PM (9 महीनों पहले) |
|---|
| संयम | 30/11/2025 03:25 PM (20 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 333819 [orionsec orion-ops तक 5925824997a3109651bbde07460958a7be249ed1 SSH Connection MachineInfoController.java host/sshPort/username/password/authType अधिकार वृद्धि] |
|---|
| अंक | 18 |
|---|