izone vulnerabilities
1 known vulnerability in izone from Tendcode. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score
Latest first
- 9.1 Critical severity
izone: Server-Side Request Forgery
hopetree izone lts c011b48 contains a server-side request forgery (SSRF) vulnerability in the active push function as \\apps\\tool\\apis\\bd_push.py does not securely filter user input through push_urls() and get_urls().