Musicfreedesktop
Monthly
Server-side request forgery in the Request Forwarder of MusicFreeDesktop 0.0.6, 0.0.7 and 0.0.8 allows a crafted proxy request to be relayed to an attacker-chosen destination, giving low confidentiality, integrity and availability impact (CVSS 4.0 base 5.3; independently assessed as CVSS 3.1 AV:N/AC:L/PR:N/UI:R with low C/I/A). The CVSS vector indicates the attack path is unauthenticated (PR:N) but requires user interaction (UI:P/UI:R), for example a user loading or playing attacker-influenced content that causes the app to emit a proxy request; the exact trigger is not described in the available sources. A public PoC reference exists in the form of GitHub issue #443, but it is not verified as working exploit code, there is no CISA KEV listing, and the vendor fix is upstream commit b0d3876247a0a64fa0e430e4b21870e41f503182.
Server-side request forgery in the Request Forwarder of MusicFreeDesktop 0.0.6, 0.0.7 and 0.0.8 allows a crafted proxy request to be relayed to an attacker-chosen destination, giving low confidentiality, integrity and availability impact (CVSS 4.0 base 5.3; independently assessed as CVSS 3.1 AV:N/AC:L/PR:N/UI:R with low C/I/A). The CVSS vector indicates the attack path is unauthenticated (PR:N) but requires user interaction (UI:P/UI:R), for example a user loading or playing attacker-influenced content that causes the app to emit a proxy request; the exact trigger is not described in the available sources. A public PoC reference exists in the form of GitHub issue #443, but it is not verified as working exploit code, there is no CISA KEV listing, and the vendor fix is upstream commit b0d3876247a0a64fa0e430e4b21870e41f503182.