VYPR

Workplace Search Github Enterprise Server integration

by Elastic

CVEs (1)

  • CVE-2021-37940MedDec 7, 2021
    risk 0.44cvss 6.8epss 0.01

    An information disclosure via GET request server-side request forgery vulnerability was discovered with the Workplace Search Github Enterprise Server integration. Using this vulnerability, a malicious Workplace Search admin could use the GHES integration to view hosts that might…