PyTorch TorchServe < 0.8.2 伺服器端要求偽造 (SSRF)

critical Nessus Plugin ID 184081

版本 1.1

Nov 1, 2023, 1:41 PM

  • CVSS metrics ("CVSSv3 score" changed from 10.0 to 9.8. "CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H")
  • CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C")

Plugin Feed: 202311011341

版本 1.0

Oct 31, 2023, 5:54 PM

  • New

Plugin Feed: 202310311754

* Changelogs are generally available for changes made after Nov 1, 2022