Lucene search
Veracode Vulnerability DatabaseVERACODE:27974HistoryNov 24, 2020 - 7:16 a.m.
Server-Side Request Forgery (SSRF)
2020-11-2407:16:04
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
ssrf
vulnerable
private-ip
validation
insecure regular expressions
requests
attacker
library
ip addresses
EPSS
0.009
Percentile
83.2%
private-ip is vulnerable to server-side request forgery (SSRF). An application using the library allows an attacker to bypass the insecure regular expressions used to validate IP addresses, and perform requests on behalf of the server.
Related
huntr
huntr
Server-Side Request Forgery (SSRF) in frenchbread/private-ip
2021-03-30 08:12:57
github
github
Server-Side Request Forgery in private-ip
2021-04-13 15:18:17
osv
osv
Server-Side Request Forgery in private-ip
2021-04-13 15:18:17
CVE-2020-28360
2020-11-23 21:15:12
prion
prion
Code injection
2020-11-23 21:15:00
nvd
nvd
CVE-2020-28360
2020-11-23 21:15:12
cve
cve
CVE-2020-28360
2020-11-23 21:15:12
cvelist
cvelist
CVE-2020-28360
2020-11-23 20:33:13
hackerone
hackerone