HOMEVULNERABILITIESVENDORSPrivate-ip Project

Private-ip ProjectCVEs & Vulnerabilities

1 CVEs affecting Private-ip Project products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

private-ip 1
CVE-2020-28360CRITICAL

Insufficient RegEx in private-ip npm package v1.0.5 and below insufficiently filters reserved IP ranges resulting in indeterminate SSRF. An attacker can perform a large range of requests to ARIN reserved IP ranges, resulting in an indeterminable number of critical attack vectors, allowing remote attackers to request server-side resources or potentially execute arbitrary code through various SSRF techniques.

24 Nov 2020
9.8
CVSS
← PrevPage 1 / 1Next →
← All Vendors·CVE Database
Private-ip Project CVEs & Vulnerabilities — 1 Tracked