PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Turning bad SSRF to good SSRF: Websphere Portal (CVE-2021-27748)

slcyber.io | vulnerability | CVE-2021-27748 | #vulnerability-research | #exploitation | #ssrf | #websphere | #cve-2021-27498
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Turning redirect-only SSRF into full-read SSRF in Websphere Portal (CVE-2021-27748) via open redirect chaining.
CVE
CVE-2021-27748
Published
Collected

Related coverage

vulnerability · slcyber.io
Advisory: Websphere Portal SSRFs & Post Auth RCE - CVE-2021-27748
Websphere Portal 9 is vulnerable to multiple unauthenticated SSRFs and a post-auth RCE via directory traversal in Zip file upload.
vulnerability · slcyber.io
Stealing administrative JWT's through post auth SSRF (CVE-2021-22056)
Post-auth SSRF in VMware Workspace ONE Access (CVE-2021-22056) chained to steal admin JWTs and achieve RCE.
vulnerability · slcyber.io
High Fidelity Detection Mechanism for php2shell (CVE-2026-109618 and CVE-2026-109619)
The research team releases an open source tool php2shell-scanner which contains a high fidelity scanning mechanism to check for CVE-2026-109618 and CVE-2026-109619 across hosts.
vulnerability · slcyber.io
Advisory: VMWare Workspace One Access (CVE-2021-22056)
A post-auth SSRF in VMware Workspace One Access allows stealing administrative JWTs leading to remote code execution.
vulnerability · slcyber.io
Advisory: Jamf Pro SSRF - CVE-2021-39303 & CVE-2021-40809
Jamf Pro before version 10.32 is vulnerable to a post-auth SSRF allowing attackers to read arbitrary URLs including cloud metadata endpoints.
vulnerability · slcyber.io
Discovering Full Read SSRF in Jamf (CVE-2021-39303 & CVE-2021-40809)
Full read SSRF in Jamf Pro (CVE-2021-39303 & CVE-2021-40809): discovery process, exploitation, and impact on cloud-hosted instances.
Back