Описание
Server-Side Request Forgery in phantomjs-seo
This affects all versions of package phantomjs-seo. It is possible for an attacker to craft a url that will be passed to a PhantomJS instance allowing for an SSRF attack.
Пакеты
Наименование
phantomjs-seo
npm
Затронутые версииВерсия исправления
<= 1.0.0
Отсутствует
Связанные уязвимости
CVSS3: 8.2
ubuntu
больше 5 лет назад
This affects all versions of package phantomjs-seo. It is possible for an attacker to craft a url that will be passed to a PhantomJS instance allowing for an SSRF attack.
CVSS3: 8.2
nvd
больше 5 лет назад
This affects all versions of package phantomjs-seo. It is possible for an attacker to craft a url that will be passed to a PhantomJS instance allowing for an SSRF attack.