Ip Address
Monthly
Server-side request forgery (SSRF) in the ip-address JavaScript library allows bypass of security checks on IPv4-mapped and NAT64 IPv6 addresses. Versions 10.1.1 through 10.2.0 misclassify these addresses as global unicast instead of recognizing their embedded IPv4 addresses, enabling potential SSRF attacks against internal networks. No public exploit is identified, but the fix is available in version 10.2.1.
Server-side request forgery (SSRF) in the ip-address JavaScript library allows bypass of security checks on IPv4-mapped and NAT64 IPv6 addresses. Versions 10.1.1 through 10.2.0 misclassify these addresses as global unicast instead of recognizing their embedded IPv4 addresses, enabling potential SSRF attacks against internal networks. No public exploit is identified, but the fix is available in version 10.2.1.