Description (CNA)
The package github.com/hoppscotch/proxyscotch before 1.0.0 are vulnerable to Server-side Request Forgery (SSRF) when interceptor mode is set to proxy. It occurs when an HTTP request is made by a backend server to an untrusted URL submitted by a user. It leads to a leakage of sensitive information from the server.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / github.com/hoppscotch/proxyscotch | affected unspecified before 1.0.0 |
CWE
No CWE identifiers supplied.
References
- https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMHOPPSCOTCHPROXYSCOTCH-2435228
- https://github.com/hoppscotch/proxyscotch/commit/de67380f62f907f201d75854b76024ba4885fab7
ADP enrichment
No English description supplied.