Server-Side Request Forgery (SSRF) in rudloff/alltube

🗓️ 01 Mar 2022 22:01:30Reported by GitHub Advisory DatabaseType

Server-Side Request Forgery (SSRF) in rudloff/alltube. Vulnerable releases prior to 3.0.2. Patch 3.0.2 fixes the vulnerability by preventing internal hostname requests

Reporter	Title	Published	Views	Family All 13
Huntr	Server-Side Request Forgery (SSRF)	26 Feb 202205:57	–	huntr
CNNVD	AllTube Download 代码问题漏洞	28 Feb 202200:00	–	cnnvd
CVE	CVE-2022-0768	28 Feb 202209:20	–	cve
Cvelist	CVE-2022-0768 Server-Side Request Forgery (SSRF) in rudloff/alltube	28 Feb 202209:20	–	cvelist
EUVD	EUVD-2022-1524	3 Oct 202520:07	–	euvd
Friends Of PHP	Server-Side Request Forgery (SSRF)	27 Feb 202212:30	–	friendsofphp
NVD	CVE-2022-0768	28 Feb 202210:15	–	nvd
OSV	CVE-2022-0768 Server-Side Request Forgery (SSRF) in rudloff/alltube	28 Feb 202209:20	–	osv
OSV	GHSA-R5HC-WM3G-HJW6 Server-Side Request Forgery (SSRF) in rudloff/alltube	1 Mar 202222:01	–	osv
Prion	Server side request forgery (ssrf)	28 Feb 202210:15	–	prion

Vulners

Node

rudloff alltubeRange<3.0.2composer

Source	Link
github	www.github.com/Rudloff/alltube/security/advisories/GHSA-r5hc-wm3g-hjw6
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-0768
github	www.github.com/Rudloff/alltube/commit/3a4f09dda0a466662a4e52cde674749e0c668e8d
github	www.github.com/rudloff/alltube/commit/148a171b240e7ceb076b9e198bef412de14ac55d
huntr	www.huntr.dev/bounties/9b14cc46-ec08-4940-83cc-9f986b2a5903
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/rudloff/alltube/CVE-2022-0768.yaml
github	www.github.com/advisories/GHSA-r5hc-wm3g-hjw6

02 Feb 2024 17:01Current

1.1Low risk

Vulners AI Score1.1

CVSS 26.4

CVSS 3.19.1

CVSS 38.6

EPSS0.00847

CWE-918