CERT24GHSA-q3ph-3gv2-g5wq: SSRF vulnerability in Psono ServerLoading data…

GHSA-q3ph-3gv2-g5wq: SSRF vulnerability in Psono Server

Psono Server CE and EE versions 0.1.0 through 7.2.3 accepted a user-controlled host when configuring a personal Duo device and passed it to the Duo client without an allowlist or explicit timeout.

← Back to intelligence

GHSA-q3ph-3gv2-g5wq: SSRF vulnerability in Psono Server

Psono Server CE and EE versions 0.1.0 through 7.2.3 accepted a user-controlled host when configuring a personal Duo device and passed it to the Duo client without an allowlist or explicit timeout.