Lucene search
+L
Paranoidhttp ProjectParanoidhttp*

1 matches found

CVE
CVE
added 2023/01/30 12:0 a.m.155 views

CVE-2023-24623

CVE-2023-24623 affects paranoidhttp before 0.3.0. The SSRF flaw arises because [::] is equivalent to 127.0.0.1 but the private-address filter is not applied, allowing unintended requests to internal resources. Public references in connected docs confirm the vulnerability and its description acros...

7.5CVSS7.4AI score0.00684EPSS
Save