VYPR

Ssrf Agent

by Ssrf Agent Project

CVEs (1)

  • CVE-2021-23718MedNov 22, 2021
    risk 0.35cvss 6.5epss 0.02

    The package ssrf-agent before 1.0.5 are vulnerable to Server-side Request Forgery (SSRF) via the defaultIpChecker function. It fails to properly validate if the IP requested is private.