CVE-2023-41054

CVE-2023-41054 affects LibreY, a LibreX fork, with a Server-Side Request Forgery in image_proxy.php prior to commit 8f9b9803f231e2954e5b49987a532d28fe50a627. The issue allows an attacker to use the server as a proxy to issue HTTP GET requests to arbitrary targets, access internal-network informat...

CVE-2023-41055

LibreY is vulnerable to a Server-Side Request Forgery (SSRF) in the engines/google/text.php and engines/duckduckgo/text.php files for versions before commit be59098abd119cda70b15bf3faac596dfd39a744. The issue allows remote attackers to coerce the server into issuing HTTP GET requests to arbitrary...