Skip to content
OpenAdvisories

Archive

23 January 2024

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2024-22203 Public exploit

    Whoogle Search Server Side Request Forgery vulnerability

    Whoogle Search is a self-hosted metasearch engine. In versions prior to 0.8.4, the `element` method in `app/routes.py` does not validate the user-controlled `src_type` and `element_url` variables and passes them to the `send` method which sends a GET request …