Vrite
CVE-2023-5572
CRITICAL
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
Server-Side Request Forgery (SSRF) in GitHub repository vriteio/vrite prior to 0.3.0.
AnalysisAI
Server-Side Request Forgery (SSRF) in GitHub repository vriteio/vrite prior to 0.3.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Technical ContextAI
This vulnerability is classified as Server-Side Request Forgery (SSRF) (CWE-918), which allows attackers to make the server perform requests to unintended internal or external resources. Server-Side Request Forgery (SSRF) in GitHub repository vriteio/vrite prior to 0.3.0. Affected products include: Vrite. Version information: prior to 0.3.0..
RemediationAI
A vendor patch is available. Apply the latest security update as soon as possible. Validate and allowlist destination URLs, block requests to internal networks, use network segmentation.
Improper Input Validation in GitHub repository vriteio/vrite prior to 0.3.0. Rated high severity (CVSS 7.5), this vulner
Allocation of Resources Without Limits or Throttling in GitHub repository vriteio/vrite prior to 0.3.0. Rated medium sev
Same weakness CWE-918 – Server-Side Request Forgery (SSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today