Paper/Archive/CVE-2023-5572

CVE-2023-5572

vriteio vriteio/vrite — Server-Side Request Forgery (SSRF) in vriteio/vrite

EPSS 1%public exploit CVSS 10.0

critical.is priorityof 100

53

CVSS 10.0 (CNA)10.0 / 10 × 3030.0 Not in CISA KEV+300.0 EPSS percentile 63.0.630 × 2012.6 Exploit: SSVC poc+1010.0 SSVC exploitation: poc+100.0

Description · from the CVE record

Server-Side Request Forgery (SSRF) in GitHub repository vriteio/vrite prior to 0.3.0.

Affected

ProductAffectedFixed inSource

vriteio/vriteunspecified – < 0.3.00.3.0CNA

Scores by source

@huntrdev (CNA)10.0CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

refhuntr.dev/bounties/db649f1b-8578-4ef0-8df3-d320ab33f1be refgithub.com/vriteio/vrite/commit/1877683b932bb33fb20d688e476284b70bb9fe23