Lucene search
GoogleOSV:GHSA-V82V-RQ72-PHQ9HistoryJan 26, 2022 - 10:13 p.m.
Server side request forgery in @isomorphic-git/cors-proxy
2022-01-2622:13:05
Google
osv.dev
28
ssrf vulnerability
isomorphic git
cors-proxy
EPSS
0.002
Percentile
55.7%
The package @isomorphic-git/cors-proxy before 2.7.1 is vulnerable to Server-side Request Forgery (SSRF) due to missing sanitization and validation of the redirection action in middleware.js.
Related
osv
osv
CVE-2021-23664
2022-01-21 20:15:08
veracode
veracode
Server-Side Request Forgery (SSRF)
2022-01-24 06:14:14
cvelist
cvelist
CVE-2021-23664 Server-side Request Forgery (SSRF)
2022-01-21 20:00:14
prion
prion
Server side request forgery (ssrf)
2022-01-21 20:15:00
github
github
Server side request forgery in @isomorphic-git/cors-proxy
2022-01-26 22:13:05
nvd
nvd
CVE-2021-23664
2022-01-21 20:15:08
cve
cve
CVE-2021-23664
2022-01-21 20:15:08