| 제목 | miurla morphic latest Server-side request forgery |
|---|
| 설명 | SSRF vulnerability caused by calling the fetchHtml function again when the response status code is 3xx.
This may cause the following security issues：
1.Accessing internal services.
2.Port detection.
3.Frequently visit designated sites to achieve DDOS.
|
|---|
| 원천 | ⚠️ https://github.com/miurla/morphic/issues/670 |
|---|
| 사용자 | 0x1f (UID 89432) |
|---|
| 제출 | 2025. 09. 01. PM 06:27 (8 개월 ago) |
|---|
| 모더레이션 | 2025. 09. 13. PM 05:09 (12 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 323828 [miurla morphic 까지 0.4.5 HTTP Status Code 3xx /api/advanced-search fetchHtml 권한 상승] |
|---|
| 포인트들 | 18 |
|---|