CVE-2017-7553

6.3 mediumEPSS 0.7%

Medium (6.3) in redhat mobile application platform. EPSS 0.7% chance of exploitation in the next 30 days.

The external_request api call in App Studio (millicore) allows server side request forgery (SSRF). An attacker could use this flaw to probe the network internal resources, and access restricted endpoints.

Severity

CVSS 3.0

6.3 medium

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
CWE: CWE-918
Published: 2017-09-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

redhat:mobile_application_platform

References

https://access.redhat.com/errata/RHSA-2017:2674
https://access.redhat.com/errata/RHSA-2017:2675
https://bugzilla.redhat.com/show_bug.cgi?id=1478792
https://access.redhat.com/errata/RHSA-2017:2674
https://access.redhat.com/errata/RHSA-2017:2675

Check your stack JSON