CVE-2023-27163

request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery SSRF via the component /api/baskets/name. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request...

request-baskets 代码问题漏洞

request-baskets is a web service from rbaskets open source. A security vulnerability exists in request-baskets v1.2.1 and earlier versions, which stems from a discovery via component/api/baskets/name that contains a server-side request forgery SSRF vulnerability. An attacker could use this...

CVE-2023-27163: Server-Side Request Forgery (SSRF)

request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery SSRF via the component /api/baskets/name. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request...

CVE-2023-27163

CVE-2023-27163 affects Request-Baskets versions up to 1.2.1. The issue is a Server-Side Request Forgery (SSRF) via the /api/baskets/{name} endpoint, where the forward_url parameter can direct requests to internal or restricted resources. Ambitious attackers can leverage this to access internal ne...