CVE-2024-39338

Published
View on NVD ↗
CVSS v3
7.5
HIGH
CVSS v2
N/A
Affected
1
PROJECT

Description

axios 1.7.2 allows SSRF via unexpected behavior where requests for path relative URLs get processed as protocol relative URLs.

axios/axios
axios/axios
Promise based HTTP client for the browser and node.js
GitHubGitHub
109K