.. / CVE-2023-27163

• SSRF
• PoC
• Hack The Box

Exploit for request-baskets <= 1.2.1 - Server-Side Request Forgery (CVE-2023-27163)

Description:

request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/baskets/{name}. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request.

Try the exploit in a lab environment:

References: