GitHub SSRF Vulnerability

GitHub SSRF Vulnerability

A Server-Side Request Forgery (SSRF) vulnerability in GitHub repository plantuml/plantuml prior to 1.2023.9. has been released. (CVE-2023-3432)

Affected Systems

Configuration 1
cpe:2.3:a:plantuml:plantuml:*:*:*:*:*:*:*:* Up to (excluding) 1.2023.9

IoC’s

-

Recommended Solution(s)

-

Mitigations

-

CVE / CWE

CVE-2023-3432

Related Website(s)

• https://nvd.nist.gov/vuln/detail/CVE-2023-3432
• https://github.com/plantuml/plantuml/commit/b32500bb61ae617bb312496d6d832e4be8190797
• https://huntr.dev/bounties/8ac3316f-431c-468d-87e4-3dafff2ecf51

* Vulnerabilities with a CVSS 3.1 score between 7.0 and 8.9 are evaluated to be “high” whereas vulnerabilities with a CVSS 3.1 score between 9.0 and 10.0 are evaluated to be “critical”.