• caglararli@hotmail.com
  • 05386281520

CVE-2024-22205 | benbusby whoogle-search up to 0.8.3 GET Request request.py send location server-side request forgery (GHSL-2023-186)

Çağlar Arlı      -    28 Views

CVE-2024-22205 | benbusby whoogle-search up to 0.8.3 GET Request request.py send location server-side request forgery (GHSL-2023-186)

A vulnerability, which was classified as critical, was found in benbusby whoogle-search up to 0.8.3. Affected is the function send of the file request.py of the component GET Request Handler. The manipulation of the argument location leads to server-side request forgery. This vulnerability is traded as CVE-2024-22205. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.