The ip package before 1.1.9 for... CVE-2023-42282

- AV AC AU C I A
发布： 2024-02-08
修订： 2024-03-15

The ip package before 1.1.9 for Node.js might allow SSRF because some IP addresses (such as 0x7f.1) are improperly categorized as globally routable via isPublic.

0%

漏洞利用/PoC

暂无可用Exp或PoC

受影响的平台与产品

当前有3条受影响产品信息