Lucene search

K
githubexploitC135552C-43CD-545C-9A12-7F62FD49A5DE
HistoryDec 28, 2023 - 11:36 a.m.

Exploit for Server-Side Request Forgery in Rbaskets Request Baskets

2023-12-2811:36:37
288
server-side request forgery
cve-2023-27163
request-baskets
vulnerability
api request
network resources
sensitive information
exploit
flask web server
docker container
poc

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

AI Score

6.3

Confidence

High

EPSS

0.094

Percentile

94.8%

Proof Of Concept of SSRF on Request-Baskets (CVE-2023-27163)

This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

AI Score

6.3

Confidence

High

EPSS

0.094

Percentile

94.8%