Skip to main content

Vendor/product archive

trms / tightrope_media_carousel CVEs

Beta · best-effort

1 CVEs tagged to trms / tightrope_media_carousel1 Critical, 0 High, 0 Medium, 0 Low, 0 Unrated.

CVE-2019-13020

Published Aug 26, 2019

The fetch API in Tightrope Media Carousel before 7.1.3 has CarouselAPI/v0/fetch?url= SSRF. This has two potential areas for abuse. First, a specially crafted URL could be used in…

CVSS 10.0 · Critical
Vendor/product tagsBeta · best-effort
Showing 1-1 of 1 CVEsPage 1 of 1