CVE-2018-1099

Published April 3rd, 2018

View on NVD ↗

CVSS v3

N/A

CVSS v2

2.1

LOW

Affected

PROJECT

Description

DNS rebinding vulnerability found in etcd 3.3.1 and earlier. An attacker can control his DNS records to direct to localhost, and trick the browser into sending requests to localhost (or any other address).

etcd-io/etcd

Distributed reliable key-value store for the most critical data of a distributed system

GitHub

51.9K