Tag

Dns-Rebinding

1 brief RSS

AVideo SSRF Vulnerability via HTTP Redirect and DNS Rebinding

AVideo is vulnerable to Server-Side Request Forgery (SSRF) due to improper validation of user-supplied URLs that does not prevent HTTP redirects, and DNS rebinding due to discarded resolved IP addresses.

aVideo ssrf dns-rebinding

2r 2i Jan 3, 2024