Paper/Archive/CVE-2022-0768

CVE-2022-0768

rudloff rudloff/alltube — Server-Side Request Forgery (SSRF) in rudloff/alltube

EPSS 2%CVSS 9.1

critical.is priorityof 100

43

CVSS 9.1 (NVD)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 76.4.764 × 2015.3 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

Server-Side Request Forgery (SSRF) in GitHub repository rudloff/alltube prior to 3.0.2.

Affected

ProductAffectedFixed inSource

rudloff/alltubeunspecified – < 3.0.23.0.2CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

@huntrdev (CNA)8.6CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

References

refhuntr.dev/bounties/9b14cc46-ec08-4940-83cc-9f986b2a5903 refgithub.com/rudloff/alltube/commit/148a171b240e7ceb076b9e198bef412de14ac55d