Submit #524009: https://github.com/zhangyanbo2007/youkefu youkefu 4.2.0 SSRFinfo

Titlehttps://github.com/zhangyanbo2007/youkefu youkefu 4.2.0 SSRF
DescriptionDuring a security assessment of Youkefu, I discovered a Server-Side Request Forgery (SSRF) vulnerability in an endpoint that processes user-supplied URLs. The lack of URL validation allowed attackers to craft malicious requests and exploit the server's network access.
Source⚠️ https://github.com/exp3n5ive/Vul/blob/main/youkefu/youkefu.pdf
User
 exp3n5ive (UID 83031)
Submission03/20/2025 12:29 (1 Year ago)
Moderation03/30/2025 19:30 (10 days later)
StatusAccepted
VulDB entry302046 [zhangyanbo2007 youkefu 4.2.0 /res/url server-side request forgery]
Points17

Want to stay up to date on a daily basis?

Enable the mail alert feature now!