GHSA-v9mp-j8g7-2q6mHighCVSS 7.5

Paranoidhttp Server-Side Request Forgery vulnerability

Published
January 30, 2023
Last Modified
May 20, 2024

🔗 CVE IDs covered (1)

CVE-2023-24623 →

📋 Description

Paranoidhttp before 0.3.0 allows SSRF because [::] is equivalent to the 127.0.0.1 address, but does not match the filter for private addresses.

🎯 Affected products1

  • go/github.com/hakobe/paranoidhttp:< 0.3.0

🔗 References (6)