CVE-2023-28155
16.03.2023, 15:15
The Request package through 2.88.1 for Node.js allows a bypass of SSRF mitigations via an attacker-controller server that does a cross-protocol redirect (HTTP to HTTPS, or HTTPS to HTTP). NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
| Vendor | Product | Version |
|---|---|---|
| request_project | request | 𝑥 ≤ 2.88.1 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References