GHSA-w35p-wxwj-rcm9
Dashboard / Vulnerabilities / GHSA-w35p-wxwj-rcm9
Summary: Server-Side Request Forgery (SSRF) in vriteio/vrite
Details: Server-Side Request Forgery (SSRF) in GitHub repository vriteio/vrite prior to 0.3.0.
References: https://nvd.nist.gov/vuln/detail/CVE-2023-5572, https://github.com/vriteio/vrite/commit/1877683b932bb33fb20d688e476284b70bb9fe23, https://github.com/vriteio/vrite, https://huntr.dev/bounties/db649f1b-8578-4ef0-8df3-d320ab33f1be
Affected packages
Package
Name: @vrite/sdk
Purl: pkg:npm/%40vrite/sdk
Affected ranges
Type: SEMVER
Events:
Introduced- 0
Fixed -0.3.0
Affected versions
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
