Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Versions of the package ssrfcheck before 1.2.0 are vulnerable to Server-Side Request Forgery (SSRF) due to an incomplete denylist of IP address ranges. Specifically, the package fails to classify the reserved IP address space 224.0.0.0/4 (Multicast) as invalid. This oversight allows attackers to craft requests targeting these multicast addresses.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Vulnerability Type
服务端请求伪造(SSRF)
Vulnerability Title
SSRF Check 安全漏洞
Vulnerability Description
SSRF Check是Felippe Regazio个人开发者的一个检查字符串是否包含潜在的SSRF攻击。 SSRF Check 1.2.0之前版本存在安全漏洞，该漏洞源于IP地址范围拒绝列表不完整，可能导致服务端请求伪造。
CVSS Information
N/A
Vulnerability Type
N/A