CVE-2017-2100
MEDIUMAppGoat <V3.0.1 - SSRF
Title source: llmDescription
Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.1 and earlier allows remote attackers to conduct DNS rebinding attacks via unspecified vectors.
Scores
CVSS v3
6.3
EPSS
0.0034
EPSS Percentile
55.9%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Classification
CWE
CWE-20
Status
published
Affected Products (2)
ipa/appgoat
< 3.0.1
INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN (IPA)/Hands-on Vulnerability Learning Tool "AppGoat" for Web Application
< V3.0.1 and earlier
Timeline
Published
Apr 28, 2017
Tracked Since
Feb 18, 2026