Описание
This affects all versions of package phantomjs-seo. It is possible for an attacker to craft a url that will be passed to a PhantomJS instance allowing for an SSRF attack.
Ссылки
- PatchThird Party Advisory
- ExploitThird Party Advisory
- PatchThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:phantomjs-seo_project:phantomjs-seo:1.0.0:*:*:*:*:node.js:*:*
EPSS
Процентиль: 50%
0.00267
Низкий
8.2 High
CVSS3
6.4 Medium
CVSS2
Дефекты
CWE-918
Связанные уязвимости
CVSS3: 8.2
ubuntu
больше 5 лет назад
This affects all versions of package phantomjs-seo. It is possible for an attacker to craft a url that will be passed to a PhantomJS instance allowing for an SSRF attack.
EPSS
Процентиль: 50%
0.00267
Низкий
8.2 High
CVSS3
6.4 Medium
CVSS2
Дефекты
CWE-918