CVE-2023-41055

LibreY is a fork of LibreX, a framework-less and javascript-free privacy respecting meta search engine. LibreY is subject to a Server-Side Request Forgery SSRF vulnerability in the engines/google/text.php and engines/duckduckgo/text.php files in versions before commit...

CVE-2023-41055

LibreY is vulnerable to a Server-Side Request Forgery (SSRF) in the engines/google/text.php and engines/duckduckgo/text.php files for versions before commit be59098abd119cda70b15bf3faac596dfd39a744. The issue allows remote attackers to coerce the server into issuing HTTP GET requests to arbitrary...