CVE-2023-36088

2023-09-0116:15:07

Google

osv.dev

cve-2023-36088

server side request forgery

nebulagraph studio

sensitive information

software

7.4 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

50.2%

JSON

Server Side Request Forgery (SSRF) vulnerability in NebulaGraph Studio version 3.7.0, allows remote attackers to gain sensitive information.

CPENameOperatorVersion
nebula-studioeq3.6.0
nebula-studioeq3.2.1
nebula-studioeq3.7.0
nebula-studioeq3.5.0
nebula-studioeq3.2.2
nebula-studioeq3.3.0
nebula-studioeq3.2.0
nebula-studioeq3.4.0
nebula-studioeq3.0.0
nebula-studioeq3.2.3

Name	Operator	Version
nebula-studio	eq	3.6.0
nebula-studio	eq	3.2.1
nebula-studio	eq	3.7.0
nebula-studio	eq	3.5.0
nebula-studio	eq	3.2.2
nebula-studio	eq	3.3.0
nebula-studio	eq	3.2.0
nebula-studio	eq	3.4.0
nebula-studio	eq	3.0.0
nebula-studio	eq	3.2.3