Skip to content
Threat Feed
Subscribe

Vendor

Hmbown

1 brief RSS
high advisory

SSRF Bypass in CodeWhale via DNS Pinning TOCTOU

CodeWhale versions before 0.8.64 contain a time-of-check-time-of-use vulnerability in DNS pinning logic, allowing attackers to bypass SSRF mitigations and access internal resources.

CodeWhale +2 vulnerability argument-injection code-execution remote-code-execution credential-theft
5t 1c