Security Advisory

CVE-2022-25876

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-07-01 20:00:22

Last updated 2024-09-17 01:56:48

Assigner snyk

CVSS score 6.2

State PUBLISHED

Description

The package link-preview-js before 2.1.16 are vulnerable to Server-side Request Forgery (SSRF) which allows attackers to send arbitrary requests to the local network and read the response. This is due to flawed DNS rebinding protection.

← Browse all CVEs View on cve.org ↗