Lucene search
GitHub Advisory DatabaseGHSA-V82V-RQ72-PHQ9HistoryJan 26, 2022 - 10:13 p.m.
Server side request forgery in @isomorphic-git/cors-proxy
2022-01-2622:13:05
CWE-918
GitHub Advisory Database
github.com
21
0.001 Low
EPSS
Percentile
50.1%
The package @isomorphic-git/cors-proxy before 2.7.1 is vulnerable to Server-side Request Forgery (SSRF) due to missing sanitization and validation of the redirection action in middleware.js.
| CPE | Name | Operator | Version |
|---|---|---|---|
| @isomorphic-git/cors-proxy | lt | 2.7.1 |
Related
osv
osv
CVE-2021-23664
2022-01-21 20:15:08
Server side request forgery in @isomorphic-git/cors-proxy
2022-01-26 22:13:05
veracode
veracode
Server-Side Request Forgery (SSRF)
2022-01-24 06:14:14
cvelist
cvelist
CVE-2021-23664 Server-side Request Forgery (SSRF)
2022-01-21 00:00:00
prion
prion
Server side request forgery (ssrf)
2022-01-21 20:15:00
cve
cve
CVE-2021-23664
2022-01-21 20:15:00