The Spinnaker template resolution functionality is vulnerable to Server-Side Request Forgery (SSRF), which allows an attacker to send requests on behalf of Spinnaker potentially leading to sensitive data disclosure.
{ "cpe": "cpe:2.3:a:spinnaker:orca:*:*:*:*:*:*:*:*", "source": "CPE_FIELD", "extracted_events": [ { "introduced": "0" }, { "fixed": "8.7.0" } ] }
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-9298.json"