CVE-2023-27163

Description

request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/baskets/{name}. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request.

References

https://github.com/AmulyaKaushik/CVE-2023-27163-lab

https://github.com/Jeanback1/exploit-vault

https://github.com/Jeanback1/CVE-2023-30253-exploit

https://github.com/Jeanback1/CVE-2023-27163-exploit

https://github.com/tombstoneghost/htb-sau-exploit-chain

https://github.com/thealchimist86/CVE-2023-27163---Maltrail-0.53---RCE

https://github.com/thealchimist86/CVE-2023-27163---SSRF-Baskets-Requests

https://github.com/G4sp4rCS/htb-sau-automated

https://github.com/IvAlexEv/Exploit-CVE

https://github.com/Hamibubu/CVE-2023-27163

https://github.com/cowsecurity/CVE-2023-27163

https://github.com/0xFTW/CVE-2023-27163

https://github.com/HusenjanDev/CVE-2023-27163-AND-Mailtrail-v0.53

https://github.com/overgrowncarrot1/CVE-2023-27163

https://github.com/seanrdev/cve-2023-27163

https://github.com/J03-T/ExploitScripts

https://github.com/dugisan3rd/exploit

https://notes.sjtu.edu.cn/s/MUUhEymt7

https://github.com/darklynx/request-baskets

https://gist.github.com/b33t1e/3079c10c88cad379fb166c389ce3b7b3

http://packetstormsecurity.com/files/174129/Maltrail-0.53-Remote-Code-Execution.html

http://packetstormsecurity.com/files/174128/Request-Baskets-1.2.1-Server-Side-Request-Forgery.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS