CVE-2023-27163

request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery SSRF via the component /api/baskets/name. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request...

CVE-2023-27163

request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery SSRF via the component /api/baskets/name. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request...

CVE-2023-27163

CVE-2023-27163 affects Request-Baskets versions up to 1.2.1. The issue is a Server-Side Request Forgery (SSRF) via the /api/baskets/{name} endpoint, where the forward_url parameter can direct requests to internal or restricted resources. Ambitious attackers can leverage this to access internal ne...

CVE-2023-27163: Server-Side Request Forgery (SSRF)

request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery SSRF via the component /api/baskets/name. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request...