Sebastion
←All topics

cloudflare

1 piece of writing

MarSeventh/CloudFlare-ImgBed PR #625 blocked SSRF in fetchRes
vulnerability8 min read

MarSeventh/CloudFlare-ImgBed PR #625 blocked SSRF in fetchRes

MarSeventh/CloudFlare-ImgBed exposed an authenticated server-side URL proxy through fetchRes. PR #625 adds URL validation, private address blocking and redirect revalidation.