Linux Distros Unpatched Vulnerability : CVE-2020-28168

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Axios NPM package 0.21.0 contains a Server-Side Request Forgery SSRF vulnerability where an attacker is able to bypass a proxy by providing a URL that responds...

CVE-2020-28168

creationtimestamp| type| source ---|---|--- 2025-05-14 23:15:09+00:00| seen| https://gist.github.com/0xi1y4an7/605ea54aa36cbd993d66a4e7d1674901 2026-05-19 01:47:50+00:00| seen| https://gist.github.com/joemocha/fe552c9601dc58c4f9731982ab0d1f8c...

Security Bulletin: IBM Sterling Control Center is vulnerable to server-side request forgery due to Node.js axios module (CVE-2020-28168)

Summary Node.js axios module is used by IBM Sterling Control Center. A server-side request forgery vulnerability in Node.js axios module has been addressed. Vulnerability Details CVEID: CVE-2020-28168 DESCRIPTION: Node.js axios module is vulnerable to server-side request forgery, caused by improp...

Using vulnerable dependencies in package.json

Description 1. Hello team, The Showdoc is using a axios 0.17.1 dependency that is vulnerable to:👇 1. CVE-2021-3749 Regular Expression Denial of Service ReDoS 2. CVE-2020-28168 Server-Side Request Forgery SSRF 3. CVE-2019-10742 Denial of Service DoS Path to the file:...

Security Bulletin: IBM App Connect Enterprise Certified Container may be vulnerable to a Server-Side Request Forgery vulnerability (CVE-2020-28168)

Summary If an App Connect flow calls a URL controlled by a malicious actor, and App Connect Enterprise is running in an environment with a proxy, the controller of the target URL can construct a response with a redirect that results in the proxy being bypassed Vulnerability Details CVEID:...

UBUNTU-CVE-2020-28168

Axios NPM package 0.21.0 contains a Server-Side Request Forgery SSRF vulnerability where an attacker is able to bypass a proxy by providing a URL that responds with a redirect to a restricted host or IP address...

CVE-2020-28168

CVE-2020-28168 affects the Axios NPM package (version 0.21.0). The vulnerability is an SSRF issue where an attacker can bypass a proxy by supplying a URL that responds with a redirect to a restricted host or IP address. The description explicitly ties the SSRF to proxy bypass behavior, outlining ...