PT-2023-5343 · Librey · Librey

Name of the Vulnerable Software and Affected Versions: LibreY versions prior to commit be59098abd119cda70b15bf3faac596dfd39a744 Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability in the engines/google/text.php and engines/duckduckgo/text.php files. This...

LibreY Code Issue Vulnerability

LibreY is a fork of LibreX, a frameless and JavaScript-free privacy-respecting metasearch engine by hnhx. A code issue vulnerability exists in LibreY. An attacker could use this vulnerability to request the server to send an HTTP GET request to an arbitrary target and conduct a Denial of Service...

PT-2023-5342 · Librey · Librey

Name of the Vulnerable Software and Affected Versions: LibreY versions prior to commit 8f9b9803f231e2954e5b49987a532d28fe50a627 Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability in the image proxy.php file. This vulnerability allows remote attackers to use the...

CVE-2023-41055: Server-Side Request Forgery (SSRF)

LibreY is a fork of LibreX, a framework-less and javascript-free privacy respecting meta search engine. LibreY is subject to a Server-Side Request Forgery SSRF vulnerability in the engines/google/text.php and engines/duckduckgo/text.php files in versions before commit...

CVE-2023-41054: Server-Side Request Forgery (SSRF)

LibreY is a fork of LibreX, a framework-less and javascript-free privacy respecting meta search engine. LibreY is subject to a Server-Side Request Forgery SSRF vulnerability in the imageproxy.php file of LibreY before commit 8f9b9803f231e2954e5b49987a532d28fe50a627. This vulnerability allows remo...