CVE-2023-46480: Server-Side Request Forgery (SSRF)

November 28, 2023 (updated December 7, 2023)

An issue in OwnCast v.0.1.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via the authHost parameter of the indieauth function.

References

github.com/advisories/GHSA-392h-r46j-q24p
github.com/shahzaibak96/CVE-2023-46480
nvd.nist.gov/vuln/detail/CVE-2023-46480

Detect and mitigate CVE-2023-46480 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →