Lucene search
K

5 matches found

Veracode
Veracode
added 2022/05/04 8:54 a.m.40 views

Server-side Request Forgery (SSRF)

github.com/hoppscotch/proxyscotch is vulnerable to server-side request forgery. When the interceptor mode is set to proxy, An attacker can make HTTP requests to untrusted URLs through the main function of server.go and gain access to sensitive information...

7.5CVSS1.4AI score0.00317EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2022/05/03 12:0 a.m.15 views

GHSA-5HJH-C26M-XW8W ProxyScotch is vulnerable to a server-side Request Forgery (SSRF)

ProxyScotch is a simple proxy server created for hoppscotch.io. The package github.com/hoppscotch/proxyscotch before 1.0.0 are vulnerable to Server-side Request Forgery SSRF when interceptor mode is set to proxy. It occurs when an HTTP request is made by a backend server to an untrusted URL...

7.5CVSS7.4AI score0.00317EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2022/05/03 12:0 a.m.25 views

ProxyScotch is vulnerable to a server-side Request Forgery (SSRF)

ProxyScotch is a simple proxy server created for hoppscotch.io. The package github.com/hoppscotch/proxyscotch before 1.0.0 are vulnerable to Server-side Request Forgery SSRF when interceptor mode is set to proxy. It occurs when an HTTP request is made by a backend server to an untrusted URL...

7.5CVSS1.7AI score0.00317EPSS
Exploits1References4Affected Software1
Prion
Prion
added 2022/05/01 4:15 p.m.13 views

Server side request forgery (ssrf)

The package github.com/hoppscotch/proxyscotch before 1.0.0 are vulnerable to Server-side Request Forgery SSRF when interceptor mode is set to proxy. It occurs when an HTTP request is made by a backend server to an untrusted URL submitted by a user. It leads to a leakage of sensitive information...

5CVSS7.4AI score0.00317EPSS
Exploits1References2Affected Software1
Snyk
Snyk
added 2022/03/29 3:4 p.m.2 views

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF when interceptor mode is set to proxy. It occurs when an HTTP request is made by a backend server to an untrusted URL submitted by a user. It leads to a leakage of sensitive information from the server...

7.5CVSS6.6AI score0.00317EPSS
Exploits1References2
Rows per page
Query Builder