Back to the CVE list
CVE-2023-27163

Server-side request forgery in Rbaskets Request Baskets

CVSS score

6.5

EPSS probability

%6.6

Risk score

0.4

Published

3 y ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

AmulyaKaushik/CVE-2023-27163-lab

Public PoCSource updated: 20.09.2026 14:29:01

Jeanback1/CVE-2023-27163-exploit

Public PoCSource updated: 12.05.2026 04:49:07

Automated exploit chain for HTB Sau — CVE-2023-27163 (SSRF) + Maltrail Unauthenticated RCE → Reverse Shell

Public PoCSource updated: 18.04.2026 09:12:15

Exploit for CVE-2023-27163 - Maltrail(0.53) - RCE

Public PoCSource updated: 03.02.2026 18:39:40

Exploit for CVE-2023-27163 - SSRF Baskets Requests

Public PoCSource updated: 03.02.2026 18:37:56

PoC and internal port brute-forcer for CVE-2023-27163

Public PoCSource updated: 09.06.2025 09:39:09

Proof of Concept exploit for Server Side Request Forgery vulnerability in Requests Basket v1.2.1 and before.

Public PoCSource updated: 16.10.2025 20:11:56

CVE-2023-27163 Request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/baskets/{name}. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request. This POC utilizes the SSRF to perfrom RCE.

Public PoCSource updated: 16.06.2026 10:58:19

SSRF CVE-2023-27163 + maltrail vuln RCE

Public PoCSource updated: 02.04.2025 12:37:00

btar1gan/exploit_CVE-2023-27163

Public PoCSource updated: 22.09.2024 03:33:56

A exploit for the CVE-2023-27163 (SSRF) vulnerability in the web application request-baskets (<= v.1.2.1) (★2)

Public PoCSource updated: 05.01.2024 02:04:49

Proof-of-Concept for Server Side Request Forgery (SSRF) in request-baskets (<= v.1.2.1) (★0)

Public PoCSource updated: 12.07.2023 10:42:04

To assist in enumerating the webserver behind the webserver SSRF CVE-2023-27163 (★0)

Public PoCSource updated: 19.07.2023 15:33:17

CVE-2023-27163 (★0)

Public PoCSource updated: 20.07.2023 09:19:34

Poc of SSRF for Request-Baskets (CVE-2023-27163) (★0)

Public PoCSource updated: 26.07.2023 20:12:11

PoC CVE-2023-27163, SSRF, request-baskets hasta v1.2.1 (★0)

Public PoCSource updated: 27.07.2023 00:59:06

Requests Baskets (CVE-2023-27163) and Mailtrail v0.53 (★0)

Public PoCSource updated: 05.08.2023 18:37:36

CVE-2023-27163 - Request Baskets SSRF (★0)

Public PoCSource updated: 10.08.2023 14:46:57

Golang PoC for CVE-2023-27163 Mailtrail Exploit (★0)

Public PoCSource updated: 13.08.2023 13:23:54

CVE-2023-27163 Request-Baskets v1.2.1 - Server-side request forgery (SSRF) (★0)

Public PoCSource updated: 13.08.2023 17:52:33

A tool to perform port scanning using vulnerable Request-Baskets (★0)

Public PoCSource updated: 29.08.2023 01:59:09

PoC for 2023-27163 Maltrail v0.53 (★0)

Public PoCSource updated: 29.08.2023 23:03:28

Python implementation of CVE-2023-27163 (★0)

Public PoCSource updated: 21.09.2023 11:55:11

Proof of Concept for Server Side Request Forgery (SSRF) in request-baskets (V<= v.1.2.1) (★0)

Public PoCSource updated: 28.12.2023 20:45:13

Nuclei: Request-Baskets <= 1.2.1 - Server Side Request Forgery

Exploit reference

https://gist.github.com/b33t1e/3079c10c88cad379fb166c389ce3b7b3

Exploit reference

https://notes.sjtu.edu.cn/s/MUUhEymt7

Exploit reference

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2023-27163"