critical9.8Public exploit code
CVE-2022-38580
Zalando Skipper v0.13.236 is vulnerable to Server-Side Request Forgery (SSRF).
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- X-Skipper-Proxy v0.13.237 - Server Side Request Forgery (SSRF)2023-03-28 · remote · multiple
Impact
Zalando Skipper v0.13.236 is vulnerable to Server-Side Request Forgery (SSRF).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zalando | Skipper | before 0.13.237 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/171546/X-Skipper-Proxy-0.13.237-Server-Side-Request-Forgery.html
- https://gist.github.com/Fadavvi/9fffcfa4aaa9e25b77cfe7b3044b2857#file-cve-2022-38580
- https://pastebin.com/dXxpgPAK
- http://packetstormsecurity.com/files/171546/X-Skipper-Proxy-0.13.237-Server-Side-Request-Forgery.html
- https://gist.github.com/Fadavvi/9fffcfa4aaa9e25b77cfe7b3044b2857#file-cve-2022-38580
- https://pastebin.com/dXxpgPAK