EUVD-2021-2458

Malware in sbrugna...

CVE-2021-23718

The package ssrf-agent before 1.0.5 are vulnerable to Server-side Request Forgery SSRF via the defaultIpChecker function. It fails to properly validate if the IP requested is private...

Server side request forgery (ssrf)

The package ssrf-agent before 1.0.5 are vulnerable to Server-side Request Forgery SSRF via the defaultIpChecker function. It fails to properly validate if the IP requested is private...

CVE-2021-23718

CVE-2021-23718 concerns the npm package ssrf-agent (versions before 1.0.5). The vulnerability arises in the defaultIpChecker function, which fails to properly validate if a requested IP is private, enabling potential Server-Side Request Forgery (SSRF) via crafted URLs. Multiple connected sources ...