CERT24ghsa-wx3w-fghf-hgf7: Server-Side Request Forgery in NonceGeek dim-sum-appLoading data…
CERT24Threat Observatory
Period

ghsa-wx3w-fghf-hgf7: Server-Side Request Forgery in NonceGeek dim-sum-app

A vulnerability was detected in the textSearchV2Handler function in deno/main.tsx of the Deno Backend component of NonceGeek dim-sum-app. Manipulation of the supabase_url argument enables server-side request forgery (SSRF). The attack can be executed remotely, and the exploit has been publicly disclosed and may be used.

← Back to intelligence

ghsa-wx3w-fghf-hgf7: Server-Side Request Forgery in NonceGeek dim-sum-app

A vulnerability was detected in the textSearchV2Handler function in deno/main.tsx of the Deno Backend component of NonceGeek dim-sum-app. Manipulation of the supabase_url argument enables server-side request forgery (SSRF). The attack can be executed remotely, and the exploit has been publicly disclosed and may be used.