CVE-2020-28168

MEDIUM5.9EPSS 0.45%

Axios vulnerable to Server-Side Request Forgery

發布日:2021/1/4修改日:2023/11/8
也稱為:GHSA-4w2v-q235-vp99DEBIAN-CVE-2020-28168

描述

Axios NPM package 0.21.0 contains a Server-Side Request Forgery (SSRF) vulnerability where an attacker is able to bypass a proxy by providing a URL that responds with a redirect to a restricted host or IP address.

受影響套件(2)

CVSS 分數

來源版本嚴重程度向量
osvCVSS 3.1MEDIUM5.9CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

參考連結(11)