Threats tagged 'ghsa-m39w-xf3h-v4h2'

A server-side request forgery (SSRF) vulnerability exists in the sanitize_proxy_url function of the extension_proxy Route component in heshengtao super-agent-party up to version 0.4.1. This vulnerability allows remote attackers to manipulate the url argument, potentially causing unauthorized requests from the server. The vulnerability has a high severity score of 7.3 and public exploit details have been disclosed. The vendor has not responded to the disclosure and no patch information is available.