CVE-2020-36200

EUVD-2020-23764
TinyCheck before commits 9fd360d and ea53de8 allowed an authenticated attacker to send an HTTP GET request to the crafted URLs.
SSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 49%
Affected Products (NVD)
VendorProductVersion
kasperskytinycheck
𝑥
< 2020-12-18
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/KasperskyLab/TinyCheck/security/advisories/GHSA-gqpw-3669-6w5h
https://github.com/KasperskyLab/TinyCheck/security/advisories/GHSA-gqpw-3669-6w5h