| Package | Affected versions | Patched versions |
|---|---|---|
| glastopf | = 3.1.3 |
Glastopf 3.1.3-dev has SSRF, as demonstrated by the abc.php a parameter. NOTE: the vendor indicates that this is intentional behavior because the product is a web application honeypot, and modules/handlers/emulators/rfi.py supports Remote File Inclusion emulation
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free