CVE-2021-23664

8.6

HIGHCVSS v3

Published

January 21, 2022

CVSS v2

5 MEDIUM

Affected

2 projects

Assigned by

[email protected]

Severity scale

010

Description

The package @isomorphic-git/cors-proxy before 2.7.1 are vulnerable to Server-side Request Forgery (SSRF) due to missing sanitization and validation of the redirection action in middleware.js.

@isomorphic-git/cors-proxy

NPMProxy clone and push requests for the browser

< 2.7.1NVD

isomorphic-git/cors-proxy

GitHubProxy clone and push requests for the browser

< 2.7.1NVD

More on this CVE

NVD↗GitHub Advisory↗

Security Advisories

CVE-2021-23664

Description

More on this CVE