| 标题 | Psi Probe <=5.3.0 Server-Side Request Forgery |
|---|
| 描述 | Psi Probe contains a server-side request forgery (SSRF) vulnerability in the whois functionality. The application automatically connects to arbitrary servers specified in whois ReferralServer responses without validation, allowing authenticated attackers to scan internal networks, access internal services, and bypass firewall restrictions.
|
|---|
| 来源 | ⚠️ https://github.com/AnalogyC0de/public_exp/issues/12 |
|---|
| 用户 | Ana10gy (UID 93358) |
|---|
| 提交 | 2026-02-15 04時38分 (2 月前) |
|---|
| 管理 | 2026-02-26 16時13分 (11 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 347994 [psi-probe PSI Probe 直到 5.3.0 Whois Whois.java lookup 权限提升] |
|---|
| 积分 | 18 |
|---|