GitHub Advisoryadvisory · npm

GHSA-9vp3-7qwq-83r9 Server-Side Request Forgery in FUXA

HIGH Published 2022-03-17 Modified 2022-03-25 Official page ↗
Aliases
CVE-2021-45851
Ecosystem
npm
Packages
@frangoteam/fuxa
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-918
Reviewed
2022-03-25

Affected packages

• npm @frangoteam/fuxa: <= 1.1.3 (no fix yet)

Description

A Server-Side Request Forgery (SSRF) attack in FUXA 1.1.3 can be carried out leading to the obtaining of sensitive information from the server's internal environment and services, often potentially leading to the attacker executing commands on the server.

Related

Alias · CVE (1)

  • CVE-2021-45851 A Server-Side Request Forgery (SSRF) attack in FUXA 1.1.3 can be carried out leading to the obtaining of sensitive information from the… vulnerability

Weakness · CWE (1)

  • CWE-918 Server-Side Request Forgery weakness

References