CVE-2024-22417

Whoogle Search is a self-hosted metasearch engine. In versions 0.8.3 and prior, the "element" method in "app/routes.py" does not validate the user-controlled "srctype" and "elementurl" variables and passes them to the "send" method which sends a "GET" request on lines 339-343 in "requests.py". Th...

CVE-2024-22203: Server-Side Request Forgery (SSRF)

Whoogle Search is a self-hosted metasearch engine. In versions prior to 0.8.4, the element method in app/routes.py does not validate the user-controlled srctype and elementurl variables and passes them to the send method which sends a GET request on lines 339-343 in request.py, which leads to a...

CVE-2024-22417: Improper Neutralization of Input During Web Page Generation

Whoogle Search is a self-hosted metasearch engine. In versions 0.8.3 and prior, the element method in app/routes.py does not validate the user-controlled srctype and elementurl variables and passes them to the send method which sends a GET request on lines 339-343 in requests.py. The returned...