---
id: 9045
title: "Advisory: Jamf Pro SSRF - CVE-2021-39303 & CVE-2021-40809"
cve: CVE-2021-39303
source_domain: slcyber.io
source_url: "https://www.slcyber.io/research/advisory-jamf-pro-ssrf-cve-2021-39303-cve-2021-40809"
published_at: "2021-11-30T00:00:00Z"
tags: ["cloud", "vulnerability-research", "advisory", "ssrf", "jamf", "cve-2021-39303", "cve-2021-40809"]
phying_url: "https://phying.com/item/9045"
lang: en
---

# Advisory: Jamf Pro SSRF - CVE-2021-39303 & CVE-2021-40809

## Summary

Jamf Pro before version 10.32 is vulnerable to a post-auth SSRF allowing attackers to read arbitrary URLs including cloud metadata endpoints.

## Intelligence Metadata

- **Sources:** slcyber.io
- **CVE:** CVE-2021-39303
- **Published:** 2021-11-30T00:00:00Z
- **Original:** https://www.slcyber.io/research/advisory-jamf-pro-ssrf-cve-2021-39303-cve-2021-40809
- **Phying News:** https://phying.com/item/9045