Submit #524009: https://github.com/zhangyanbo2007/youkefu youkefu 4.2.0 SSRFinfo

Titelhttps://github.com/zhangyanbo2007/youkefu youkefu 4.2.0 SSRF
BeschreibungDuring a security assessment of Youkefu, I discovered a Server-Side Request Forgery (SSRF) vulnerability in an endpoint that processes user-supplied URLs. The lack of URL validation allowed attackers to craft malicious requests and exploit the server's network access.
Quelle⚠️ https://github.com/exp3n5ive/Vul/blob/main/youkefu/youkefu.pdf
Benutzer
 exp3n5ive (UID 83031)
Einreichung20.03.2025 12:29 (vor 2 Jahren)
Moderieren30.03.2025 19:30 (10 days later)
StatusAkzeptiert
VulDB Eintrag302046 [zhangyanbo2007 youkefu 4.2.0 /res/url erweiterte Rechte]
Punkte17

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!