Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-37c4-9pw5-3r33

Опубликовано: 21 июл. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

Server-Side Request Forgery (SSRF) vulnerability exists in the URL processing functionality of PHProxy version 1.1.1 and prior. The input validation for the _proxurl parameter can be bypassed, allowing a remote, unauthenticated attacker to submit a specially crafted URL

Server-Side Request Forgery (SSRF) vulnerability exists in the URL processing functionality of PHProxy version 1.1.1 and prior. The input validation for the _proxurl parameter can be bypassed, allowing a remote, unauthenticated attacker to submit a specially crafted URL

EPSS

Процентиль: 39%
0.00463
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 9.1
nvd
около 1 года назад

Server-Side Request Forgery (SSRF) vulnerability exists in the URL processing functionality of PHProxy version 1.1.1 and prior. The input validation for the _proxurl parameter can be bypassed, allowing a remote, unauthenticated attacker to submit a specially crafted URL

EPSS

Процентиль: 39%
0.00463
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-918