What is GHSA-9vp3-7qwq-83r9?

GHSA-9vp3-7qwq-83r9 is a security advisory published by GitHub Security Advisories with High severity. Server-Side Request Forgery in FUXA

Which CVE IDs does GHSA-9vp3-7qwq-83r9 cover?

GHSA-9vp3-7qwq-83r9 covers the following CVE IDs: CVE-2021-45851. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-9vp3-7qwq-83r9?

GHSA-9vp3-7qwq-83r9 has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-9vp3-7qwq-83r9?

GHSA-9vp3-7qwq-83r9 affects 1 product, including: npm/@frangoteam/fuxa:\u003c= 1.1.3.

GHSA-9vp3-7qwq-83r9HighCVSS 7.5

Server-Side Request Forgery in FUXA

Vendor

GitHub Security Advisories

Published

March 17, 2022

Last Modified

January 27, 2023

🔗 CVE IDs covered (1)

CVE-2021-45851 →

📋 Description

A Server-Side Request Forgery (SSRF) attack in FUXA 1.1.3 can be carried out leading to the obtaining of sensitive information from the server's internal environment and services, often potentially leading to the attacker executing commands on the server.

🎯 Affected products1

npm/@frangoteam/fuxa:<= 1.1.3

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2021-45851
https://www.youtube.com/watch?v=JE1Kcq3iJpc
https://github.com/advisories/GHSA-9vp3-7qwq-83r9