CVE-2021-27670

CRITICAL EXPLOITED NUCLEI

Appspace 6.2.4 - SSRF

Title source: llm

Description

Appspace 6.2.4 allows SSRF via the api/v1/core/proxy/jsonprequest url parameter.

Nuclei Templates (1)

Appspace 6.2.4 - Server-Side Request Forgery
CRITICALVERIFIEDby ritikchaddha
Shodan: title:"Appspace" || http.title:"appspace"
FOFA: title="appspace"

References (1)

Scores

CVSS v3 9.8
EPSS 0.9284
EPSS Percentile 99.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

VulnCheck KEV 2026-01-21
CWE
CWE-918
Status published
Products (1)
appspace/appspace 6.2.4
Published Feb 25, 2021
Tracked Since Feb 18, 2026