Rocket TRUfusion Enterprise through 7.10.4.0 uses a reverse proxy to handle incoming connections. However, the proxy is misconfigured in a way that allows specifying absolute URLs in the HTTP request line, causing the proxy to load the given resource.
This scanner targets the reverse proxy configuration in Rocket TRUfusion Enterprise to detect SSRF flaws, enabling attackers to send arbitrary HTTP requests from the server.
Used 3.1k times · 4.2k assets checked · domain, subdomain, ipv4
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →