Description
The Spinnaker template resolution functionality is vulnerable to Server-Side Request Forgery (SSRF), which allows an attacker to send requests on behalf of Spinnaker potentially leading to sensitive data disclosure.
Remediation
References
https://github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2020-003.md
Related Vulnerabilities
CVE-2021-23382 Vulnerability in npm package postcss
CVE-2022-24740 Vulnerability in npm package @plone/volto
CVE-2021-46361 Vulnerability in maven package info.magnolia:magnolia-core
CVE-2020-35210 Vulnerability in maven package io.atomix:atomix
CVE-2018-21234 Vulnerability in maven package org.jodd:jodd-json