Lucene search
+L

7 matches found

Github Security Blog
Github Security Blog
•added 2021/12/02 5:51 p.m.•42 views

Server-Side Request Forgery in ssrf-agent

The package ssrf-agent before 1.0.5 are vulnerable to Server-side Request Forgery SSRF via the defaultIpChecker function. It fails to properly validate if the IP requested is private...

7.5CVSS3.7AI score0.01615EPSS
SaveExploits1References6Affected Software1
osv_ghsa
osv_ghsa
•added 2021/12/02 5:51 p.m.•53 views

GHSA-6GWW-QPM6-MC2G Server-Side Request Forgery in ssrf-agent

The package ssrf-agent before 1.0.5 are vulnerable to Server-side Request Forgery SSRF via the defaultIpChecker function. It fails to properly validate if the IP requested is private...

6.5CVSS7.6AI score0.01615EPSS
SaveExploits1References6
Prion
Prion
•added 2021/11/22 5:15 p.m.•24 views

Server side request forgery (ssrf)

The package ssrf-agent before 1.0.5 are vulnerable to Server-side Request Forgery SSRF via the defaultIpChecker function. It fails to properly validate if the IP requested is private...

5CVSS7.5AI score0.01615EPSS
SaveExploits1References3Affected Software1
Mend
Mend
•added 2021/11/22 5:00 p.m.•5 views

CVE-2021-23718

The package ssrf-agent before 1.0.5 are vulnerable to Server-side Request Forgery SSRF via the defaultIpChecker function. It fails to properly validate if the IP requested is private...

7.5CVSS0.01615EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2021/11/22 5:00 p.m.•39 views

CVE-2021-23718 Server-side Request Forgery (SSRF)

The package ssrf-agent before 1.0.5 are vulnerable to Server-side Request Forgery SSRF via the defaultIpChecker function. It fails to properly validate if the IP requested is private...

6.5CVSS7.8AI score0.01615EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/22 12:00 a.m.•7 views

CVE-2021-23718: Server-Side Request Forgery (SSRF)

The package ssrf-agent before 1.0.5 are vulnerable to Server-side Request Forgery SSRF via the defaultIpChecker function. It fails to properly validate if the IP requested is private...

7.5CVSS5.8AI score0.01615EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/11/22 12:00 a.m.•2 views

PT-2021-15546

Name of the Vulnerable Software and Affected Versions ssrf-agent versions prior to 1.0.5 Description The issue is related to Server-side Request Forgery SSRF via the defaultIpChecker function. It fails to properly validate if the IP requested is private. Recommendations For versions prior to 1.0....

7.5CVSS0.01615EPSS
SaveExploits1References10
Rows per page
Query Builder