{"id":"CVE-2017-7553","aliases":["EUVD-2017-16561","GHSA-rmmq-9vg2-553m","RHSA-2017:2674"],"status":"published","title":"The external_request api call in App Studio (millicore) allows server side request forgery (SSRF)...","description":"The external_request api call in App Studio (millicore) allows server side request forgery (SSRF). An attacker could use this flaw to probe the network internal resources, and access restricted endpoints.","severity":{"version":"3.0","score":6.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00699,"percentile":0.53392,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-918"],"published":"2017-09-28T20:00:00Z","modified":"2026-08-05T10:04:45Z","affected":[{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"fh-system-dump-tool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-5.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"fping","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10-4.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"fping-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10-4.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.8-8.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.8-8.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.8-8.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.8-8.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-apt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-breeze","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-by_ssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-cluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-dbi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-dig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-disk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-disk_smb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-dummy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-file_age","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-flexlm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-fping","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-game","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-hpjd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-icmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-ide_smart","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-ifoperstatus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-ifstatus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-ircd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-load","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-log","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-mailq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-mrtg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-mrtgtraf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-nagios","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-nt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-ntp-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-nwstat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-overcr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-ping","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-procs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-radius","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-real","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-rpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-sensors","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-smtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-ssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-swap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-tcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-time","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-ups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-uptime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-users","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-wave","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"perl-Crypt-CBC","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.33-2.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"perl-Crypt-DES","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.05-20.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"perl-Crypt-DES-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.05-20.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"perl-Net-SNMP","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.1-7.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"phantomjs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.7-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"phantomjs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.7-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"python-meld3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.10-1.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"python-meld3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.10-1.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"qstat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11-13.20080912svn311.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"qstat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11-13.20080912svn311.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"radiusclient-ng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.6-9.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"radiusclient-ng-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.6-9.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"radiusclient-ng-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.6-9.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"radiusclient-ng-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.6-9.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.21-2.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.21-2.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"rhmap-fh-openshift-templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-11.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"rhmap-mod_authnz_external","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.1-7.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"rhmap-mod_authnz_external-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.1-7.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"sendEmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.56-2.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"ssmtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.64-14.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"ssmtp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.64-14.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"supervisor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-3.el7map"}]}],"bundled":4}],"products":[{"vendor":"redhat","product":"mobile_application_platform"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2017:2674","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2675","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1478792","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7553","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7553","tags":["report"]},{"url":"https://github.com/advisories/GHSA-rmmq-9vg2-553m"},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-US/red_hat_mobile_application_platform/4.5/html-single/4.5.0_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1477797","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1478770","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1480386","tags":["report"]},{"url":"https://issues.redhat.com/browse/RHMAP-16510","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2674.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7552","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7552","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7552","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7553","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7554","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7554","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7554","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-1000117","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-1000117","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-1000117","tags":["advisory"]},{"url":"http://blog.recurity-labs.com/2017-08-10/scm-vulns","tags":["article"]},{"url":"https://lkml.org/lkml/2017/8/10/757","tags":["article"]}],"sources":{"cve":[{"id":"CVE-2017-7553","description":"The external_request api call in App Studio (millicore) allows server side request forgery (SSRF). An attacker could use this flaw to probe the network internal resources, and access restricted endpoints.","status":"published","published":"2017-09-28T20:00:00Z","modified":"2024-08-05T16:04:12.023Z","updated_at":"2026-11-02T14:33:20.171335Z"}],"euvd":[{"id":"EUVD-2017-16561","description":"The external_request api call in App Studio (millicore) allows server side request forgery (SSRF). An attacker could use this flaw to probe the network internal resources, and access restricted endpoints.","status":"published","published":"2017-09-28T20:00:00Z","modified":"2024-08-05T16:04:12Z","updated_at":"2026-11-03T02:39:08.024596Z"}],"ghsa":[{"id":"GHSA-rmmq-9vg2-553m","title":"The external_request api call in App Studio (millicore) allows server side request forgery (SSRF)...","description":"The external_request api call in App Studio (millicore) allows server side request forgery (SSRF). An attacker could use this flaw to probe the network internal resources, and access restricted endpoints.","status":"published","published":"2022-05-14T04:01:31Z","modified":"2023-02-10T05:06:17Z","cvss":[{"version":"3.0","score":6.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-918"],"updated_at":"2026-11-02T14:54:01.286462Z"}],"nvd":[{"id":"CVE-2017-7553","description":"The external_request api call in App Studio (millicore) allows server side request forgery (SSRF). An attacker could use this flaw to probe the network internal resources, and access restricted endpoints.","status":"published","published":"2017-09-29T01:34:50.407Z","modified":"2026-06-17T01:24:35.85Z","cvss":[{"version":"3.0","score":6.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"primary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-918"],"updated_at":"2026-11-02T14:04:01.734197Z"}],"osv":[{"id":"RHSA-2017:2674","title":"Red Hat Security Advisory: Red Hat Mobile Application Platform security update","status":"published","published":"2024-09-16T00:31:05Z","modified":"2026-08-05T10:04:45Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.262457Z"}]}}