| عنوان | miurla morphic latest Server-side request forgery |
|---|
| الوصف | SSRF vulnerability caused by calling the fetchHtml function again when the response status code is 3xx.
This may cause the following security issues：
1.Accessing internal services.
2.Port detection.
3.Frequently visit designated sites to achieve DDOS.
|
|---|
| المصدر | ⚠️ https://github.com/miurla/morphic/issues/670 |
|---|
| المستخدم | 0x1f (UID 89432) |
|---|
| ارسال | 01/09/2025 06:27 PM (8 أشهر منذ) |
|---|
| الاعتدال | 13/09/2025 05:09 PM (12 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 323828 [miurla morphic حتى 0.4.5 HTTP Status Code 3xx /api/advanced-search fetchHtml تجاوز الصلاحيات] |
|---|
| النقاط | 18 |
|---|