← CVE Intelligence

CVE-2025-2691

n/a / nossrf PUBLISHED

Description (CNA)

Versions of the package nossrf before 1.0.4 are vulnerable to Server-Side Request Forgery (SSRF) where an attacker can provide a hostname that resolves to a local or reserved IP address space and bypass the SSRF protection mechanism.

Affected (CNA)

Vendor / productVersions
n/a / nossrfaffected 0 before 1.0.4

CWE

CWE-918

References

ADP enrichment

CISA-ADP

No English description supplied.