welefen/ssrf-agent

welefen/ssrf-agent

GitHubGitHub
GitHubgithub.com
Releases0
Stars20
make http(s) request to prevent SSRF
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2021-23718↗
6.5 MEDIUM5 MEDIUM

The package ssrf-agent before 1.0.5 are vulnerable to Server-side Request Forgery (SSRF) via the defaultIpChecker function. It fails to properly validate if the IP requested is private.