Lucene search
+L

4 matches found

OSV
OSV
added 2025/03/07 3:13 p.m.222 views

CVE-2025-27152 Possible SSRF and Credential Leakage via Absolute URL in axios Requests

axios is a promise based HTTP client for the browser and node.js. The issue occurs when passing absolute URLs rather than protocol-relative URLs to axios. Even if ⁠baseURL is set, axios sends the request to the specified absolute URL, potentially causing SSRF and credential leakage. This issue...

8.7CVSS6.1AI score
SaveExploits0References4
Rows per page
Query Builder