Server-side request forgery in Rbaskets Request Baskets
CVSS Skor
6.5
EPSS İhtimal
%6.6
Risk Skoru
0.4
Yayın
3 yıl önce
Public Exploits · GitHub ve Metasploit Intelligence
Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.
Automated exploit chain for HTB Sau — CVE-2023-27163 (SSRF) + Maltrail Unauthenticated RCE → Reverse Shell
Exploit for CVE-2023-27163 - Maltrail(0.53) - RCE
Exploit for CVE-2023-27163 - SSRF Baskets Requests
PoC and internal port brute-forcer for CVE-2023-27163
Proof of Concept exploit for Server Side Request Forgery vulnerability in Requests Basket v1.2.1 and before.
CVE-2023-27163 Request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/baskets/{name}. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request. This POC utilizes the SSRF to perfrom RCE.
Nuclei: Request-Baskets <= 1.2.1 - Server Side Request Forgery
https://gist.github.com/b33t1e/3079c10c88cad379fb166c389ce3b7b3
https://notes.sjtu.edu.cn/s/MUUhEymt7
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2023-27163"