【中文导读】该 CVE 涉及服务端请求伪造（高危风险）。具体受影响产品、版本和修复方案以 NVD/厂商公告为准。 【原始描述】StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 without Single Sign-on enabled are susceptible to a Server-Side Request Forgery (SSRF) vulnerability. Successful exploit could allow an unauthenticated attacker to change the password of any Grid Manager or Tenant Manager non-federated user.