| 标题 | miurla morphic latest Server-side request forgery |
|---|
| 描述 | SSRF vulnerability caused by calling the fetchHtml function again when the response status code is 3xx.
This may cause the following security issues：
1.Accessing internal services.
2.Port detection.
3.Frequently visit designated sites to achieve DDOS.
|
|---|
| 来源 | ⚠️ https://github.com/miurla/morphic/issues/670 |
|---|
| 用户 | 0x1f (UID 89432) |
|---|
| 提交 | 2025-09-01 18時27分 (1 年前) |
|---|
| 管理 | 2025-09-13 17時09分 (12 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 323828 [miurla morphic 直到 0.4.5 HTTP Status Code 3xx /api/advanced-search fetchHtml 权限提升] |
|---|
| 积分 | 18 |
|---|