Subconverter Project Subconverter 0.6.4
Approved changes feed: RSS · Atom
cpe:2.3:a:subconverter_project:subconverter:0.6.4:*:*:*:*:*:*:*part: a version: 0.6.4 update: *
| Vendor | Subconverter Project (44a415c2-da3f-505c-8b8c-ed1a9ff628d4) |
|---|---|
| Product | Subconverter (608b2522-ed5a-58d3-9a3a-310ce91c008e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:docker/tindy2013/subconverter |
purl2cpe | 2026-06-01 10:16:17.310717 |
pkg:github/tindy2013/subconverter |
purl2cpe | 2026-06-01 10:16:17.310721 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-35579 |
vulnerable | 2026-06-08 05:25:01.396657 |
Details available
tindy2013 subconverter 0.6.4 has a /sub?target=%TARGET%&url=%URL%&config=%CONFIG% API endpoint that accepts an arbitrary %URL% value and launches a GET request for it, but does not consider that the external request target may indirectly redirect back to this original /sub endpoint. Thus, a request loop and a denial of service may occur.
Published: 2020-12-20T06:31:46.000Z
Updated: 2024-08-04T17:09:13.411Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.