CVE-2021-40604: SSRF
A Server-Side Request Forgery (SSRF) vulnerability in IPS Community Suite before 4.6.2 allows remote authenticated users to request arbitrary URLs or trigger deserialization via phar protocol when generating class names dynamically. In some cases an exploitation is possible by an unauthenticated user.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-40604?
CVE-2021-40604 has a severity level of 9.1 (Critical).
What is CVE-2021-40604?
CVE-2021-40604 is a Server-Side Request Forgery (SSRF) vulnerability in IPS Community Suite before version 4.6.2.
How does CVE-2021-40604 affect IPS Community Suite?
CVE-2021-40604 allows remote authenticated users to request arbitrary URLs or trigger deserialization via the phar protocol when generating class names dynamically.
How can CVE-2021-40604 be exploited?
CVE-2021-40604 can be exploited by an unauthenticated user in some cases.
Is there a fix available for CVE-2021-40604?
Yes, a fix for CVE-2021-40604 is available in IPS Community Suite version 4.6.2.