CVE-2023-41899 Partial Server-Side Request Forgery in Home Assistant Core

Home assistant is an open source home automation. In affected versions the hassio.addonstdin is vulnerable to a partial Server-Side Request Forgery where an attacker capable of calling this service e.g.: through GHSA-h2jp-7grc-9xpp may be able to invoke any Supervisor REST API endpoints with a PO...

CVE-2023-41899 Partial Server-Side Request Forgery in Home Assistant Core

Home assistant is an open source home automation. In affected versions the hassio.addonstdin is vulnerable to a partial Server-Side Request Forgery where an attacker capable of calling this service e.g.: through GHSA-h2jp-7grc-9xpp may be able to invoke any Supervisor REST API endpoints with a PO...

CVE-2023-41899 Partial Server-Side Request Forgery in Home Assistant Core

Home assistant is an open source home automation. In affected versions the hassio.addonstdin is vulnerable to a partial Server-Side Request Forgery where an attacker capable of calling this service e.g.: through GHSA-h2jp-7grc-9xpp may be able to invoke any Supervisor REST API endpoints with a PO...

Apache Shenyu Server Side Request Forgery vulnerability

There exists an SSRF Server-Side Request Forgery vulnerability located at the /sandbox/proxyGateway endpoint. This vulnerability allows us to manipulate arbitrary requests and retrieve corresponding responses by inputting any URL into the requestUrl parameter. Of particular concern is our ability...

CVE-2023-25753 Server-Side Request Forgery in Apache ShenYu

There exists an SSRF Server-Side Request Forgery vulnerability located at the /sandbox/proxyGateway endpoint. This vulnerability allows us to manipulate arbitrary requests and retrieve corresponding responses by inputting any URL into the requestUrl parameter. Of particular concern is our ability...

CVE-2023-25753

CVE-2023-25753 affects Apache ShenYu 2.5.1. The vulnerability is a Server-Side Request Forgery (SSRF) at the /sandbox/proxyGateway endpoint, allowing an attacker to inject arbitrary URLs via the requestUrl parameter and manipulate the resulting HTTP request. The issue enables control over the HTT...

GHSA-655W-FM8M-M478 LangChain Server Side Request Forgery vulnerability

LangChain before 0.0.317 allows SSRF via documentloaders/recursiveurlloader.py because crawling can proceed from an external server to an internal server...

Server side request forgery (ssrf)

LangChain before 0.0.317 allows SSRF via documentloaders/recursiveurlloader.py because crawling can proceed from an external server to an internal server...

WordPress Motors – Car Dealer & Classified Ads Plugin <= 1.4.6 is vulnerable to Server Side Request Forgery (SSRF)

Software Motors – Car Dealer & Classified Ads Type Plugin Vulnerable versions = 1.4.6 Fixed in 1.4.7 OWASP Top 10 A1: Injection Classification Server Side Request Forgery SSRF CVE CVE-2023-46207 Patch priority Low CVSS severity Low 4.1 Developer Claim ownership PSID 2e86ea9d7329 Credits Mika...

Server-Side Request Forgery (SSRF)

vrite is vulnerable to Server-Side Request Forgery SSRF. This vulnerability allows a remote attacker to make unauthorized requests to internal servers on the target system...

Exploit for Server-Side Request Forgery in Rbaskets Request_Baskets

This is a PoC exploit for CVE-2023-27163, a remote code executio...

Exploit for Server-Side Request Forgery in Rbaskets Request_Baskets

This is a PoC exploit for CVE-2023-27163, a remote code executio...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : Adminer vulnerabilities (USN-5271-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5271-1 advisory. It was discovered that Adminer did not escape data in the history parameter of the default URI. A remote attacker could possibly...

2023 OWASP Top-10 Series: Wrap Up

Over the past several months, we've taken a journey through the new 2023 OWASP API Security Top-10 list. In the previous 12 weekly posts, we've delved into each category, discussed what it is, how it's exploited, why it matters, and suggested effective protections for each. Now, as we conclude th...

Server-Side Request Forgery (SSRF) in vriteio/vrite

Server-Side Request Forgery SSRF in GitHub repository vriteio/vrite prior to 0.3.0...

GHSA-W35P-WXWJ-RCM9 Server-Side Request Forgery (SSRF) in vriteio/vrite

Server-Side Request Forgery SSRF in GitHub repository vriteio/vrite prior to 0.3.0...

Server side request forgery (ssrf)

Server-Side Request Forgery SSRF in GitHub repository vriteio/vrite prior to 0.3.0...

CVE-2023-5572 Server-Side Request Forgery (SSRF) in vriteio/vrite

Server-Side Request Forgery SSRF in GitHub repository vriteio/vrite prior to 0.3.0...

CVE-2023-5572 Server-Side Request Forgery (SSRF) in vriteio/vrite

Server-Side Request Forgery SSRF in GitHub repository vriteio/vrite prior to 0.3.0...

CVE-2023-5572

CVE-2023-5572 describes a Server-Side Request Forgery (SSRF) vulnerability in the GitHub repository vriteio/vrite, affecting versions prior to 0.3.0. The issue arises in the vrite project and is tracked across multiple feeds (NVD, CVE lists, GHSA, osv, etc.). The standard references indicate the ...