Critical · 9.8 CVE-2022-27311 EUVD-2022-1847GHSA-vx9g-377x-xwxq

Server side request forgery in gibbon

Published Apr 25, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

Gibbon v3.4.4 and below allows attackers to execute a Server-Side Request Forgery (SSRF) via a crafted URL.

Ecosystem	Package	Affected	Fixed	Record
RubyGems	gibbon	< 3.4.4	3.4.4	GHSA-vx9g-377x-xwxq