Threats tagged 'ghsa-rw8v-cpxr-g9gp'

Kameleo versions up to 5.0.1.26 contain a server-side request forgery (SSRF) vulnerability in the Proxy Validation component. The flaw exists in the InternalController.TestProxy function, where manipulation of the host/port argument can lead to SSRF. This vulnerability can be exploited remotely. The issue is addressed by upgrading to version 5.2.0, which removes the vulnerable route and replaces it with a safer alternative.