| Package | Affected versions | Patched versions |
|---|---|---|
| trufusion enterprise | < 7.9.5.1 | 7.9.5.1 |
A Server-Side Request Forgery (SSRF) in Rocket TRUfusion Portal v7.9.2.1 allows remote attackers to gain access to sensitive resources on the internal network via a crafted HTTP request to /trufusionPortal/upDwModuleProxy.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free