CVE-2021-29357: SSRF
The ECT Provider component in OutSystems Platform Server 10 before 10.0.1104.0 and 11 before 11.9.0 (and LifeTime management console before 11.7.0) allows SSRF for arbitrary outbound HTTP requests.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-29357?
The severity of CVE-2021-29357 is high with a CVSS score of 8.6.
What is the affected software for CVE-2021-29357?
The affected software for CVE-2021-29357 includes OutSystems Lifetime Management Console, OutSystems Platform Server, and OutSystems OutSystems.
How does CVE-2021-29357 impact OutSystems Platform Server?
CVE-2021-29357 allows SSRF for arbitrary outbound HTTP requests in OutSystems Platform Server.
How can I fix CVE-2021-29357?
To fix CVE-2021-29357, upgrade OutSystems Platform Server to version 10.0.1104.0 or 11.9.0, and upgrade OutSystems Lifetime Management Console to version 11.7.0.
Where can I find more information about CVE-2021-29357?
More information about CVE-2021-29357 can be found at the following references: [CVE-2021-29357 Advisory](https://labs.integrity.pt/advisories/cve-2021-29357/) and [OutSystems Security Vulnerabilities](https://success.outsystems.com/Support/Security/Vulnerabilities/Vulnerability_RTAF-2226).