CVE Listesine Dön
CVE-2023-27163

Server-side request forgery in Rbaskets Request Baskets

CVSS Skor

6.5

EPSS İhtimal

%6.6

Risk Skoru

0.4

Yayın

3 yıl önce

Public Exploits · GitHub ve Metasploit Intelligence

Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.

AmulyaKaushik/CVE-2023-27163-lab

Public PoCKaynak güncellemesi: 20.09.2026 14:29:01

Jeanback1/CVE-2023-27163-exploit

Public PoCKaynak güncellemesi: 12.05.2026 04:49:07

Automated exploit chain for HTB Sau — CVE-2023-27163 (SSRF) + Maltrail Unauthenticated RCE → Reverse Shell

Public PoCKaynak güncellemesi: 18.04.2026 09:12:15

Exploit for CVE-2023-27163 - Maltrail(0.53) - RCE

Public PoCKaynak güncellemesi: 03.02.2026 18:39:40

Exploit for CVE-2023-27163 - SSRF Baskets Requests

Public PoCKaynak güncellemesi: 03.02.2026 18:37:56

PoC and internal port brute-forcer for CVE-2023-27163

Public PoCKaynak güncellemesi: 09.06.2025 09:39:09

Proof of Concept exploit for Server Side Request Forgery vulnerability in Requests Basket v1.2.1 and before.

Public PoCKaynak güncellemesi: 16.10.2025 20:11:56

CVE-2023-27163 Request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/baskets/{name}. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request. This POC utilizes the SSRF to perfrom RCE.

Public PoCKaynak güncellemesi: 16.06.2026 10:58:19

SSRF CVE-2023-27163 + maltrail vuln RCE

Public PoCKaynak güncellemesi: 02.04.2025 12:37:00

btar1gan/exploit_CVE-2023-27163

Public PoCKaynak güncellemesi: 22.09.2024 03:33:56

Nuclei: Request-Baskets <= 1.2.1 - Server Side Request Forgery

Exploit referansı

https://gist.github.com/b33t1e/3079c10c88cad379fb166c389ce3b7b3

Exploit referansı

https://notes.sjtu.edu.cn/s/MUUhEymt7

Exploit referansı

Bu açığı API ile alın

Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2023-27163"