Skip to content
Threat Feed
Subscribe

Product

Guzzle (7.x)

1 brief RSS
high threat

Guzzle Hostname Validation Bypass via Transport Discrepancy

Guzzle versions before 7.15.2 and 8.0.1 are vulnerable to a host-based security check bypass where transport handlers interpret non-canonical URI hostnames differently than application-level validation, potentially enabling SSRF.

exploited Guzzle +1 ssrf php vulnerability web-security
1t 1c