Server side request forgery (ssrf)

2023-03-0717:15:00

PRIOn knowledge base

www.prio-n.com

ssrf

server-side manipulation

arbitrary requests

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

JSON

A Server-Side Request Forgery (SSRF) in loonflow r2.0.14 allows attackers to force the application to make arbitrary requests via manipulation of the hook_url parameter.

CPENameOperatorVersion
loonfloweq2.0.14114

CPE	Name	Operator	Version
	loonflow	eq	2.0.14114

References

github.com/blackholll/loonflow/issues/402