Threats tagged 'ghsa-96fr-vhf8-gmqq'

A Server-Side Request Forgery (SSRF) vulnerability exists in the /api/proxy/ component of linshenkx prompt-optimizer versions 1.3.0 through 1.4.2. This flaw allows attackers to send crafted requests that can scan internal resources. The vulnerability has a CVSS 3.1 base score of 7.3, indicating high severity with impacts on confidentiality, integrity, and availability.