EUVD-2023-0556

Malicious code in bioql PyPI...

CVE-2023-24623

Paranoidhttp before 0.3.0 allows SSRF because :: is equivalent to the 127.0.0.1 address, but does not match the filter for private addresses...

GO-2023-1526 Server-side request forgery in github.com/hakobe/paranoidhttp

Paranoidhttp before is vulnerable to SSRF because :: is equivalent to the 127.0.0.1 address, but does not match the filter for private addresses...

Server-Side Request Forgery (SSRF)

github.com/hakobe/paranoidhttp is vulnerable to Server-Side Request Forgery. The vulnerability exists due to the ip.To4 parameter in the safeAddr function of client.go, as the library matches :: to the 127.0.0.1 address, but lacks filtering of private address, which allows a remote attacker to...

GHSA-V9MP-J8G7-2Q6M Paranoidhttp Server-Side Request Forgery vulnerability

Paranoidhttp before 0.3.0 allows SSRF because :: is equivalent to the 127.0.0.1 address, but does not match the filter for private addresses...

Paranoidhttp Server-Side Request Forgery vulnerability

Paranoidhttp before 0.3.0 allows SSRF because :: is equivalent to the 127.0.0.1 address, but does not match the filter for private addresses...

CVE-2023-24623

Paranoidhttp before 0.3.0 allows SSRF because :: is equivalent to the 127.0.0.1 address, but does not match the filter for private addresses...

CVE-2023-24623

Paranoidhttp before 0.3.0 allows SSRF because :: is equivalent to the 127.0.0.1 address, but does not match the filter for private addresses...

Design/Logic Flaw

Paranoidhttp before 0.3.0 allows SSRF because :: is equivalent to the 127.0.0.1 address, but does not match the filter for private addresses...

CVE-2023-24623

Paranoidhttp before 0.3.0 allows SSRF because :: is equivalent to the 127.0.0.1 address, but does not match the filter for private addresses...

Paranoidhttp 代码问题漏洞

Paranoidhttp is an application for hakobe individual developers. A pre-configured http.Client is provided. A security vulnerability exists in Paranoidhttp versions prior to 0.3.0. An attacker exploited the vulnerability to perform a server-side request forgery attack...

CVE-2023-24623

CVE-2023-24623 affects paranoidhttp before 0.3.0. The SSRF flaw arises because [::] is equivalent to 127.0.0.1 but the private-address filter is not applied, allowing unintended requests to internal resources. Public references in connected docs confirm the vulnerability and its description acros...

CVE-2023-24623

Paranoidhttp before 0.3.0 allows SSRF because :: is equivalent to the 127.0.0.1 address, but does not match the filter for private addresses...