Read the docs

spinnaker

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

spinnaker records in CISA KEV

No spinnaker vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Orca 1 record LOW

Records

1 record in Orca · all components

TI-2020-07437 CVE-2020-9298 · GHSA-4fcw-pq4r-f4q7

Server-side request forgery in Netflix Orca Spinnaker

Priority LOW 36

The Spinnaker template resolution functionality is vulnerable to Server-Side Request Forgery (SSRF), which allows an attacker to send requests on behalf of Spinnaker potentially leading to sensitive data disclosure.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01349 Published 2020-08-28 Fixed in 8.7.0 CWE-918
Open these records in search →