Paranoidhttp Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Paranoidhttp Project records in CISA KEV

No Paranoidhttp Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Paranoidhttp · all components

TI-2023-10231 CVE-2023-24623 · GHSA-v9mp-j8g7-2q6m

MEDIUM 40

Paranoidhttp before 0.3.0 allows SSRF because [::] is equivalent to the 127.0.0.1 address, but does not match the filter for private addresses.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00684 Published 2023-01-30 Fixed in 0.3.0 CWE-918