| 제목 | Psi Probe <=5.3.0 Server-Side Request Forgery |
|---|
| 설명 | Psi Probe contains a server-side request forgery (SSRF) vulnerability in the whois functionality. The application automatically connects to arbitrary servers specified in whois ReferralServer responses without validation, allowing authenticated attackers to scan internal networks, access internal services, and bypass firewall restrictions.
|
|---|
| 원천 | ⚠️ https://github.com/AnalogyC0de/public_exp/issues/12 |
|---|
| 사용자 | Ana10gy (UID 93358) |
|---|
| 제출 | 2026. 02. 15. AM 04:38 (2 개월 ago) |
|---|
| 모더레이션 | 2026. 02. 26. PM 04:13 (11 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 347994 [psi-probe PSI Probe 까지 5.3.0 Whois Whois.java lookup 권한 상승] |
|---|
| 포인트들 | 18 |
|---|