CVE-2019-12161 | BDVDB-2026-116641 Detail

Description#

WPO WebPageTest 19.04 allows SSRF because ValidateURL in www/runtest.php does not consider octal encoding of IP addresses (such as 0300.0250 as a replacement for 192.168).

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://bugzilla.mozilla.org/show_bug.cgi?id=1550366

Exploit#

No public exploit known

History#

Version 12019-05-17Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.