Description
axios 1.7.2 allows SSRF via unexpected behavior where requests for path relative URLs get processed as protocol relative URLs.
Remediation
References
Related Vulnerabilities
WordPress Plugin WordPress Infinite Scroll-Ajax Load More Unspecified Vulnerability (2.11.0)
TYPO3 Improper Input Validation Vulnerability (CVE-2019-11832)
WordPress Plugin WooCommerce Cross-Site Scripting (8.9.2)
Apache Tomcat Other Vulnerability (CVE-2006-7197)
Oracle Database Server CVE-2009-0987 Vulnerability (CVE-2009-0987)