Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-29mf-95fh-hwxf

Опубликовано: 22 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 5.5
CVSS3: 7.3

Описание

A vulnerability was determined in trueleaf ApiFlow 0.9.7. The impacted element is the function validateUrlSecurity of the file packages/server/src/service/proxy/http_proxy.service.ts of the component URL Validation Handler. This manipulation causes server-side request forgery. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.

A vulnerability was determined in trueleaf ApiFlow 0.9.7. The impacted element is the function validateUrlSecurity of the file packages/server/src/service/proxy/http_proxy.service.ts of the component URL Validation Handler. This manipulation causes server-side request forgery. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.

EPSS

Процентиль: 15%
0.0005
Низкий

5.5 Medium

CVSS4

7.3 High

CVSS3

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 7.3
nvd
18 дней назад

A vulnerability was determined in trueleaf ApiFlow 0.9.7. The impacted element is the function validateUrlSecurity of the file packages/server/src/service/proxy/http_proxy.service.ts of the component URL Validation Handler. This manipulation causes server-side request forgery. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.

EPSS

Процентиль: 15%
0.0005
Низкий

5.5 Medium

CVSS4

7.3 High

CVSS3

Дефекты

CWE-918