CVE-2020-9298

Published: Aug 28, 2020

Modified: Aug 4, 2024

PUBLISHED

Description

The Spinnaker template resolution functionality is vulnerable to Server-Side Request Forgery (SSRF), which allows an attacker to send requests on behalf of Spinnaker potentially leading to sensitive data disclosure.

Vendor	Product	Versions
n/a	Netflix Orca Spinnaker	affected `All versions prior to version v8.7.0`

References

https://github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2020-003.md

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2020-9298

Description

Affected Products

References