Description (CNA)
httparty is an API tool. In versions 0.23.2 and prior, httparty is vulnerable to SSRF. This issue can pose a risk of leaking API keys, and it can also allow third parties to issue requests to internal servers. This issue has been patched via commit 0529bcd.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| jnunemaker / httparty | affected <= 0.23.2 |
CWE
CWE-918
References
- https://github.com/jnunemaker/httparty/security/advisories/GHSA-hm5p-x4rq-38w4
- https://github.com/jnunemaker/httparty/commit/0529bcd6309c9fd9bfdd50ae211843b10054c240
ADP enrichment
No English description supplied.