CVE-2021-44139

HIGH NUCLEI

Hashicorp Sentinel - SSRF

Title source: rule

Description

Sentinel 1.8.2 is vulnerable to Server-side request forgery (SSRF).

Nuclei Templates (1)

Alibaba Sentinel - Server-side request forgery (SSRF)
HIGHby DhiyaneshDK
Shodan: title:"Sentinel Dashboard" || http.title:"sentinel dashboard"
FOFA: title="sentinel dashboard"

References (1)

Scores

CVSS v3 7.5
EPSS 0.7766
EPSS Percentile 99.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-918
Status published
Products (1)
hashicorp/sentinel 1.8.2
Published Mar 23, 2022
Tracked Since Feb 18, 2026