Lucene search
Veracode Vulnerability DatabaseVERACODE:36246HistoryJul 04, 2022 - 3:48 a.m.
Server-side Request Forgery (SSRF)
2022-07-0403:48:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
0.001 Low
EPSS
Percentile
30.5%
link-preview-js is vulnerable to server-side request forgery. The vulnerability exists because the getLinkPreview function of index.ts does not properly validate the local IP addresses before redirecting, allowing an attacker to read response data by making an HTTP request to untrusted URLs.
| CPE | Name | Operator | Version |
|---|---|---|---|
| link-preview-js | le | 2.1.15 | |
| link-preview-js | le | 2.1.15 |
Related
osv
osv
Server-Side Request Forgery in link-preview-js
2022-07-02 00:00:19
nvd
nvd
CVE-2022-25876
2022-07-01 20:15:07
cve
cve
CVE-2022-25876
2022-07-01 20:15:07
github
github
Server-Side Request Forgery in link-preview-js
2022-07-02 00:00:19
prion
prion
Server side request forgery (ssrf)
2022-07-01 20:15:00
cvelist
cvelist
CVE-2022-25876 Server-side Request Forgery (SSRF)
2022-07-01 00:00:00