Lucene search
+L

1 matches found

GitLab Advisory Database
GitLab Advisory Database
added 2026/06/16 12:0 a.m.13 views

Crawl4AI: SSRF via proxy settings in the Docker server bypasses the crawl-URL SSRF check

The Docker API server applied its SSRF destination check to the crawl target URL only, not to the proxy address. An unauthenticated request could supply a proxy pointing at an internal IP and route the browser through it, reaching internal services and cloud-metadata endpoints, while using a...

8.6CVSS5.3AI score0.00289EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder