Community post
Vulnerability description STEEMPUNK
Vulnerability description
SSRF as in Server Side Request Forgery is a vulnerability that allows an attacker to force server interfaces into sending packets initiated by the victim server to the local interface or to another server behind the firewall. Consult Web References for more information about this problem.
Affected items
/packages/bin/unsemantic/
The impact of this vulnerability
The impact varies according to the affected server interface.
How to fix this vulnerability
Your script should properly sanitize user input.
Web references
SSRF VS. BUSINESS-CRITICAL APPLICATIONS
Posted on Utopian.io - Rewarding Open Source Contributors
Replies (7)
Thanks for the information.
At the moment, I do not see a direct vulnerability. Can you go into the problem in more detail? Which testing tool did you use?
Do you have a practical example?
Your contribution cannot be approved because it is not as informative as other contributions. See the Utopian Rules. Contributions need to be informative and descriptive in order to help readers and developers understand them.
It's really nice to have someone like you around, doing vulnerability tests on open source projects.
Unfortunately this report is too broad to be helpful for the project owner.
You can contact us on Discord.
[utopian-moderator]
Congratulations @mhmtbhtyr! You have completed the following achievement on Steemit and have been rewarded with new badge(s) :
Click on the badge to view your Board of Honor.
If you no longer want to receive notifications, reply to this comment with the word
STOPCongratulations @mhmtbhtyr! You have completed the following achievement on the Steem blockchain and have been rewarded with new badge(s) :
Click here to view your Board of Honor
If you no longer want to receive notifications, reply to this comment with the word
STOPDo not miss the last post from @steemitboard:
Congratulations @mhmtbhtyr! You received a personal award!
Click here to view your Board
Do not miss the last post from @steemitboard:
Congratulations @mhmtbhtyr! You received a personal award!
You can view your badges on your Steem Board and compare to others on the Steem Ranking
Vote for @Steemitboard as a witness to get one more award and increased upvotes!
Congratulations @mhmtbhtyr! You have completed the following achievement on the Hive blockchain and have been rewarded with new badge(s) :
Your next target is to reach 200 replies.
Your next payout target is 100 HP.
The unit is Hive Power equivalent because your rewards can be split into HP and HBD
You can view your badges on your board and compare yourself to others in the Ranking
If you no longer want to receive notifications, reply to this comment with the word
STOPCheck out the last post from @hivebuzz: