Orion Ops
Monthly
Server-side request forgery in orion-ops allows authenticated remote attackers to manipulate SSH connection parameters (host, port, credentials) to trigger outbound requests from the server, potentially reaching internal services. The vulnerability affects all versions up to commit 5925824 and has a publicly available proof-of-concept exploit. Exploitation requires low-privilege access and may impact confidentiality, integrity, and availability of internal assets.
A security vulnerability in orionsec orion-ops (CVSS 7.3). Risk factors: public PoC available.
A security vulnerability in orionsec orion-ops (CVSS 4.3). Risk factors: public PoC available.
Server-side request forgery in orion-ops allows authenticated remote attackers to manipulate SSH connection parameters (host, port, credentials) to trigger outbound requests from the server, potentially reaching internal services. The vulnerability affects all versions up to commit 5925824 and has a publicly available proof-of-concept exploit. Exploitation requires low-privilege access and may impact confidentiality, integrity, and availability of internal assets.
A security vulnerability in orionsec orion-ops (CVSS 7.3). Risk factors: public PoC available.
A security vulnerability in orionsec orion-ops (CVSS 4.3). Risk factors: public PoC available.