Ouuan

Name of the Vulnerable Software and Affected Versions: WebFeed versions prior to 0.9.2 Description: The issue concerns multiple HTML injection vulnerabilities that can lead to CSRF and UI spoofing attacks. A remote attacker can provide malicious RSS feeds, attracting the victim user to visit them using WebFeed. The attacker can then inject malicious HTML into the extension page, fooling the victim into sending out HTTP requests to arbitrary sites with the victim's credentials. Users are vulnerable to CSRF attacks when visiting malicious RSS feeds via WebFeed, potentially executing unwanted actions on the user's behalf on arbitrary websites. Recommendations: For versions prior to 0.9.2, upgrade to release version 0.9.2 to address the issue. As a temporary workaround, consider avoiding the use of WebFeed to access potentially malicious RSS feeds until the upgrade is applied. Restrict access to WebFeed's functionality to minimize the risk of exploitation.

A Server-Side Request Forgery (SSRF) issue exists in the `/proxy` route, allowing remote attackers to send HTTP GET requests to arbitrary targets and retrieve internal network information.

The issue concerns a Server-Side Request Forgery (SSRF) vulnerability in the `/get` route, allowing remote attackers to use the server as a proxy to send HTTP GET requests to arbitrary targets and retrieve information in the internal network.

The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create a zip file with contents that vary depending on the implementation reading the file. The issue is related to the incorrect handling of zip files, which could allow an attacker to create an arbitrary zip file.

Name of the Vulnerable Software and Affected Versions: ip package versions through 2.0.1 for Node.js Description: The issue is related to the improper categorization of certain IP addresses as globally routable via the `isPublic()` function, which might allow Server-Side Request Forgery (SSRF) attacks. This is due to an incomplete fix for a previous issue. The vulnerability can be exploited by a remote attacker to perform SSRF attacks. It is estimated that millions of devices are potentially affected. Recommendations: For ip package versions through 2.0.1, consider disabling the `isPublic()` function until a patch is available to prevent potential SSRF attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue allows remote attackers to use the server as a proxy to send HTTP GET requests to arbitrary targets and retrieve information in the internal network or conduct Denial-of-Service (DoS) attacks. This may lead to leaking the server IP address, retrieving information in the internal network, such as accessible addresses and ports, and titles and meta descriptions of HTML pages, and denial of service amplification. The attacker can send malicious requests to a RSSHub server to make the server send HTTP GET requests to arbitrary destinations and see partial responses.

The issue is related to a Server-Side Request Forgery (SSRF) vulnerability in the `engines/google/text.php` and `engines/duckduckgo/text.php` files. This vulnerability allows remote attackers to request the server to send HTTP GET requests to arbitrary targets and conduct Denial-of-Service (DoS) attacks via the `wikipedia language` cookie. Remote attackers can request the server to download large files to reduce the performance of the server or even deny access from legitimate users.

The issue is related to a Server-Side Request Forgery (SSRF) vulnerability in the `image proxy.php` file. This vulnerability allows remote attackers to use the server as a proxy to send HTTP GET requests to arbitrary targets and retrieve information in the internal network or conduct Denial-of-Service (DoS) attacks via the `url` parameter. Attackers can also request the server to download large files or chain requests among multiple instances to reduce the performance of the server or even deny access from legitimate users.