Skip to content
OpenAdvisories

Package · Go

github.com/darklynx/request-baskets

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2023-27163 Public exploit

    request-baskets vulnerable to Server-Side Request Forgery

    request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/baskets/{name}. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request.

    github.com/darklynx/request-baskets Go