CVE-2021-21973

VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability

Description

VMware vCenter Server and Cloud Foundation Server contain a SSRF vulnerability due to improper validation of URLs in a vCenter Server plugin. This allows for information disclosure.

Severity: MEDIUM

CVSS Score: 5.3

Vendor: VMware

Product: vCenter Server and Cloud Foundation