GHSA-4W2V-Q235-VP99 Axios vulnerable to Server-Side Request Forgery

Axios NPM package 0.21.0 contains a Server-Side Request Forgery SSRF vulnerability where an attacker is able to bypass a proxy by providing a URL that responds with a redirect to a restricted host or IP address...

-lidonghui (1.0.0), -tompan-reacttemplate (>=1.0.1, <=1.1.0) +51439 more potentially affected by CVE-2020-28168 via axios (>=0.1.0, <=0.21.0)

axios NPM version =0.1.0, =1.0.1, =1.0.1, =1.0.0, =1.0.1 - 03-asenkronsdasdsadavehttprequest 1.0.0 - 04-17 1.0.0 - 04-17zy 1.0.0 - 04-a 1.0.0 - 04-code 1.0.0 - 05-clima-mundo 1.0.0 - 0726react 0.1.1 - 0a 1.0.0 - 0c 1.0.0 and more Source cves: CVE-2020-28168 Source advisory: OSV:GHSA-4W2V-Q235-VP9...

Axios NPM package code issue vulnerability

Axios is an HTTP client based on Promise a solution for asynchronous programming. A security vulnerability exists in the Axios NPM package version 0.21.0, which can be exploited by an attacker to be able to bypass the proxy by providing a URL that responds to a restricted host or IP address via a...

CVE-2020-28168

A flaw was found in nodejs-axios. The Axios NPM package contains a Server-Side Request Forgery SSRF vulnerability where an attacker is able to bypass a proxy by providing a URL that responds with a redirect to a restricted host or IP address. Mitigation A mitigation exists where by catching the...

Server-Side Request Forgery (SSRF)

axios is vulnerable to server-side request forgery SSRF. The vulnerability exists due to a lack of validation of the URL that is passed via the request from client, allowing the attacker to bypass a proxy and submit requests on behalf of the server by providing a URL that responds with a redirect...

CVE-2020-28168

Axios NPM package 0.21.0 contains a Server-Side Request Forgery SSRF vulnerability where an attacker is able to bypass a proxy by providing a URL that responds with a redirect to a restricted host or IP address...

DEBIAN-CVE-2020-28168

Axios NPM package 0.21.0 contains a Server-Side Request Forgery SSRF vulnerability where an attacker is able to bypass a proxy by providing a URL that responds with a redirect to a restricted host or IP address...

CVE-2020-28168

Axios NPM package 0.21.0 contains a Server-Side Request Forgery SSRF vulnerability where an attacker is able to bypass a proxy by providing a URL that responds with a redirect to a restricted host or IP address...

UBUNTU-CVE-2020-28168

Axios NPM package 0.21.0 contains a Server-Side Request Forgery SSRF vulnerability where an attacker is able to bypass a proxy by providing a URL that responds with a redirect to a restricted host or IP address...

Server side request forgery (ssrf)

Axios NPM package 0.21.0 contains a Server-Side Request Forgery SSRF vulnerability where an attacker is able to bypass a proxy by providing a URL that responds with a redirect to a restricted host or IP address...

CVE-2020-28168

Axios NPM package 0.21.0 contains a Server-Side Request Forgery SSRF vulnerability where an attacker is able to bypass a proxy by providing a URL that responds with a redirect to a restricted host or IP address...

CVE-2020-28168

Axios NPM package 0.21.0 contains a Server-Side Request Forgery SSRF vulnerability where an attacker is able to bypass a proxy by providing a URL that responds with a redirect to a restricted host or IP address...

CVE-2020-28168

Axios NPM package 0.21.0 contains a Server-Side Request Forgery SSRF vulnerability where an attacker is able to bypass a proxy by providing a URL that responds with a redirect to a restricted host or IP address...

CVE-2020-28168

CVE-2020-28168 affects the Axios NPM package (version 0.21.0). The vulnerability is an SSRF issue where an attacker can bypass a proxy by supplying a URL that responds with a redirect to a restricted host or IP address. The description explicitly ties the SSRF to proxy bypass behavior, outlining ...

PT-2020-6068 · Npm · Axios

Name of the Vulnerable Software and Affected Versions: Axios NPM package version 0.21.0 Description: The issue is related to insufficient validation of incoming requests in the Axios library, which can be exploited by a remote attacker to perform a Server-Side Request Forgery SSRF attack. This...

GHSA-8W9J-6WG6-QV4F Malicious Package in axioss

This package contained malicious code. The package uploaded system information such as OS and hostname to a remote server. Recommendation Remove the package from your environment. There are no indications of further compromise...

Malicious Package in axioss

This package contained malicious code. The package uploaded system information such as OS and hostname to a remote server. Recommendation Remove the package from your environment. There are no indications of further compromise...

Malicious Package in axios-http

This package contained malicious code. The package uploaded system information such as OS and hostname to a remote server. Recommendation Remove the package from your environment. There are no indications of further compromise...

GHSA-R2RG-683G-FF96 Malicious Package in axios-http

This package contained malicious code. The package uploaded system information such as OS and hostname to a remote server. Recommendation Remove the package from your environment. There are no indications of further compromise...

GHSA-WPFC-3W63-G4HM Malicious Package in axois

All versions of axois are considered malicious. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When executed, the package calls home to a Command and Control server to execute arbitrary commands. Recommendation This package...