CVE-2021-47154: Permissive Ip Octet Validation
A permissive regular expression is used to validate IPv4 octets. By not restricting leading zeros, standard network parsers may treat the octet as octal while this validation treats it as decimal. This interpretation conflict can lead to SSRF or access control bypasses. Ensure that IPv4 octets with leading zeros are explicitly rejected or properly validated
greprules fetch cve-2021-47154-permissive-ip-octet-validation --engine opengrepDescription
A permissive regular expression is used to validate IPv4 octets. By not restricting leading zeros, standard network parsers may treat the octet as octal while this validation treats it as decimal. This interpretation conflict can lead to SSRF or access control bypasses. Ensure that IPv4 octets with leading zeros are explicitly rejected or properly validated
Community feedback
0 rule-level signals from signed-in users.
- Useful reports
- 0
- Context false positives
- 0
- Metadata suggestions
- 0
Contextual precision
Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.
- Findings observed
- 0
- Projects
- 0
- Reporters
- 0
Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.
No approved finding verdicts yet.
No scan diagnostics reported yet.