CVE-2017-6201: Sandstorm

High severity, CVSS 8.1. EPSS: 1.9% chance of exploitation in the next 30 days.

A Server Side Request Forgery vulnerability exists in the install app process in Sandstorm before build 0.203. A remote attacker may exploit this issue by providing a URL. It could bypass access control such as firewalls that prevent the attackers from accessing the URLs directly.

Affected products

• Sandstorm Sandstorm: before 0.203 (fixed in 0.203)

Published 2018-02-06. Last modified 2026-06-17.