PT-2024-28456 · Axios+1 · Axios+1
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
axios version 1.7.2
Description
An issue exists where requests for path relative URLs are unexpectedly processed as protocol relative URLs, which allows Server-Side Request Forgery (SSRF). SSRF is a flaw that allows an attacker to induce the server-side application to make requests to an unintended location.
Recommendations
Update axios to version 1.7.5.
Exploit
Fix
RCE
SSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Suse
Axios