Vulnerability Details CVE-2017-7553
The external_request api call in App Studio (millicore) allows server side request forgery (SSRF). An attacker could use this flaw to probe the network internal resources, and access restricted endpoints.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 40.3%
CVSS Severity
CVSS v3 Score 6.3
CVSS v2 Score 6.5
References
Products affected by CVE-2017-7553
-
cpe:2.3:a:redhat:mobile_application_platform:4.0
-
cpe:2.3:a:redhat:mobile_application_platform:4.4
-
cpe:2.3:a:redhat:mobile_application_platform:4.4.3