Lucene search
CVE-2020-28360
Insufficient RegEx filtering in private-ip npm package v1.0.5 and below leads to indeterminate SSR
Show more
| Reporter | Title | Published | Views | Family All 9 |
|---|---|---|---|---|
 | Server-Side Request Forgery in private-ip | 13 Apr 202115:18 | – | github |
 | Server-Side Request Forgery (SSRF) | 24 Nov 202007:16 | – | veracode |
 | Server-Side Request Forgery (SSRF) in frenchbread/private-ip | 30 Mar 202108:12 | – | huntr |
 | Server-Side Request Forgery in private-ip | 13 Apr 202115:18 | – | osv |
| CVE-2020-28360 | 23 Nov 202021:15 | – | osv |
 | Code injection | 23 Nov 202021:15 | – | prion |
 | CVE-2020-28360 | 23 Nov 202020:33 | – | cvelist |
 | CVE-2020-28360 | 23 Nov 202021:15 | – | cve |
 | Node.js: Unexpected input validation of octal literals in nodejs v15.12.0 and below returns defined values for all undefined octal literals. | 30 Mar 202114:26 | – | hackerone |
Node
| Source | Link |
|---|---|
| github | www.github.com/frenchbread/private-ip |
| npmjs | www.npmjs.com/package/private-ip |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo23 Nov 2020 21:15Current
9.7High risk
Vulners AI Score9.7
CVSS27.5
CVSS39.8
EPSS0.009