CVE-2017-20157: Server-Side Request Forgery (SSRF)

December 31, 2022 (updated January 9, 2023)

A vulnerability was found in Ariadne Component Library up to 2.x. It has been classified as critical. Affected is an unknown function of the file src/url/Url.php. The manipulation leads to server-side request forgery. Upgrading to version 3.0 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-217140.

References

github.com/Ariadne-CMS/arc-web/commit/1feb1cc11e6c9f218408f15f53f537ea0d788656
github.com/Ariadne-CMS/arc-web/releases/tag/3.0
github.com/advisories/GHSA-qr97-v87p-x965
nvd.nist.gov/vuln/detail/CVE-2017-20157
vuldb.com/?ctiid.217140
vuldb.com/?id.217140

Code Behaviors & Features

Detect and mitigate CVE-2017-20157 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →