Apache Software Foundation Apache Olingo vulnerabilities

1 known vulnerability affecting apache_software_foundation/apache_olingo.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2020-1925HIGHCVSS 7.5v4.0.0 to 4.7.02020-01-09

CVE-2020-1925 [HIGH] CWE-918 CVE-2020-1925: Apache Olingo versions 4.0.0 to 4.7.0 provide the AsyncRequestWrapperImpl class which reads a URL fr Apache Olingo versions 4.0.0 to 4.7.0 provide the AsyncRequestWrapperImpl class which reads a URL from the Location header, and then sends a GET or DELETE request to this URL. It may allow to implement a SSRF attack. If an attacker tricks a client to connect to a malicious server, the server can make the client call any URL including internal resources