
CVE-2023-27163 - Request Baskets SSRF
Request Baskets SSRF PoC
alt text
As versões do Request Baskets anteriores a 1.2.1 são vulneráveis a ataques de Server Side Request Forgery (SSRF) através do componente /api/baskets/{name}.
git clone https://github.com/rvizx/CVE-2023-27163
cd CVE-2023-27163
chmod +x exploit.sh
./exploit.sh <target_url> <attacker_url>
Créditos a @beet1e da Shanghai Jiao Tong University e @chenlibo147, @houqinsheng, [email protected] da Shandong University. Artigo: https://notes.sjtu.edu.cn/s/MUUhEymt7#