CERT24GHSA-m945-23c9-6845: Server-side request forgery in NiubiGEOLoading data…
CERT24Threat Observatory
Period

GHSA-m945-23c9-6845: Server-side request forgery in NiubiGEO

NiubiGEO versions before 0.3.2 contain an unauthenticated server-side request forgery (SSRF) vulnerability. Remote attackers can use a crafted domain value to make the server request internal addresses and read responses returned in the plan’s siteEvidence JSON.

← Back to intelligence

GHSA-m945-23c9-6845: Server-side request forgery in NiubiGEO

NiubiGEO versions before 0.3.2 contain an unauthenticated server-side request forgery (SSRF) vulnerability. Remote attackers can use a crafted domain value to make the server request internal addresses and read responses returned in the plan’s siteEvidence JSON.