Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:34474
HistoryMar 01, 2022 - 2:33 p.m.

Server-Side Request Forgery (SSRF)

2022-03-0114:33:02
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10

0.002 Low

EPSS

Percentile

51.4%

rudloff/alltube is vulnerable to server-side request forgery. The vulnerability exists in omposer.json due to missing dependencies which allows an attacker to pass internal host names in the URL parameter and obtain information.

0.002 Low

EPSS

Percentile

51.4%