Description
axios 1.7.2 allows SSRF via unexpected behavior where requests for path relative URLs get processed as protocol relative URLs.
Remediation
References
Related Vulnerabilities
WordPress Plugin S3 Video Cross-Site Scripting (0.983)
WordPress Plugin Stop User Enumeration User Enumeration (1.3.4)
MediaWiki Resource Management Errors Vulnerability (CVE-2015-2936)
Squid Integer Overflow or Wraparound Vulnerability (CVE-2020-11945)
WordPress Plugin White Label CMS Cross-Site Request Forgery (1.5)