| Titolo | https://www.maxkey.top/ https://gitee.com/dromara/MaxKey 4.1.7_Latest version Server-Side Request Forgery |
|---|
| Descrizione | The open source industry-leading IAM-IDaas identity management and authentication product https://gitee.com/dromara/MaxKey has multiple SSRF vulnerabilities. |
|---|
| Fonte | ⚠️ https://github.com/honorseclab/vulns/blob/main/dromara_MaxKey/SSRF.md |
|---|
| Utente | Anonymous User |
|---|
| Sottomissione | 09/06/2025 11:20 (1 Anno fa) |
|---|
| Moderazione | 23/06/2025 14:21 (14 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 313637 [Dromara MaxKey fino a 4.1.7 Meta URL SAML20DetailsController.java add post escalationi di privilegi] |
|---|
| Punti | 15 |
|---|