Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Critical SSRF vulnerability in URL processing #45

Open
coderabbitai bot opened this issue Dec 12, 2024 · 0 comments
Open

Critical SSRF vulnerability in URL processing #45

coderabbitai bot opened this issue Dec 12, 2024 · 0 comments
Assignees
@wandmagic

Comments

@coderabbitai
Copy link
Contributor

coderabbitai bot commented Dec 12, 2024

A critical SSRF vulnerability was identified in the processUrl method. The method accepts any HTTPS URL without proper validation, allowing potential SSRF attacks. This issue was initially discussed in PR #44 in this comment.\n\nRequester: @wandmagic
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@wandmagic wandmagic

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@wandmagic