Lucene search
+L

1 matches found

OSV
OSV
added 2025/03/07 4:15 p.m.2 views

DEBIAN-CVE-2025-27152

axios is a promise based HTTP client for the browser and node.js. The issue occurs when passing absolute URLs rather than protocol-relative URLs to axios. Even if ⁠baseURL is set, axios sends the request to the specified absolute URL, potentially causing SSRF and credential leakage. This issue...

5.3CVSS6.3AI score0.00763EPSS
SaveExploits1References1
Rows per page
Query Builder