Lucene search
+L

15 matches found

OSV
OSV
added 2024/03/14 8:37 p.m.44 views

GHSA-3Q6G-QMPX-RQW4 Whoogle Search Server-Side Request Forgery vulnerability

Whoogle Search is a self-hosted metasearch engine. In versions 0.8.3 and prior, the window endpoint does not sanitize user-supplied input from the location variable and passes it to the send method which sends a GET request on lines 339-343 in request.py, which leads to a server-side request...

9.1CVSS9.2AI score0.0098EPSS
SaveExploits1References9
Rows per page
Query Builder