Submeter #524009: https://github.com/zhangyanbo2007/youkefu youkefu 4.2.0 SSRFinformação

Títulohttps://github.com/zhangyanbo2007/youkefu youkefu 4.2.0 SSRF
DescriçãoDuring a security assessment of Youkefu, I discovered a Server-Side Request Forgery (SSRF) vulnerability in an endpoint that processes user-supplied URLs. The lack of URL validation allowed attackers to craft malicious requests and exploit the server's network access.
Fonte⚠️ https://github.com/exp3n5ive/Vul/blob/main/youkefu/youkefu.pdf
Utilizador
 exp3n5ive (UID 83031)
Submissão20/03/2025 12h29 (há 2 anos)
Moderação30/03/2025 19h30 (10 days later)
EstadoAceite
Entrada VulDB302046 [zhangyanbo2007 youkefu 4.2.0 /res/url Elevação de Privilégios]
Pontos17

Want to stay up to date on a daily basis?

Enable the mail alert feature now!