Lucene search
Veracode Vulnerability DatabaseVERACODE:38984HistoryJan 24, 2023 - 9:17 a.m.
Server-Side Request Forgery (SSRF)
2023-01-2409:17:39
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
rsshub
ssrf
vulnerability
route parameter
sanitation
http requests
server
0.001 Low
EPSS
Percentile
46.4%
rsshub is vulnerable to Server-Side Request Forgery (SSRF). The vulnerability exists due to unsafe route parameter sanitation, which allows an attacker to send arbitrary HTTP requests from the server to other servers.
| CPE | Name | Operator | Version |
|---|---|---|---|
| rsshub | le | 1.0.0-master.a652e7b | |
| rsshub | le | 1.0.0-master.a652e7b |
Related
prion
prion
Server side request forgery (ssrf)
2023-01-13 15:15:00
osv
osv
CVE-2023-22493
2023-01-13 15:15:09
RSSHub SSRF vulnerability
2023-01-11 22:04:44
cvelist
cvelist
CVE-2023-22493 RSSHub is vulnerable to SSRF (Server-Side Request Forgery)
2023-01-13 14:28:49
nvd
nvd
CVE-2023-22493
2023-01-13 15:15:09
cve
cve
CVE-2023-22493
2023-01-13 15:15:09
github
github
RSSHub SSRF vulnerability
2023-01-11 22:04:44