CVE-2023-27163 PoC — request-baskets 代码问题漏洞

Source

https://github.com/madhavmehndiratta/CVE-2023-27163

Associated Vulnerability

Title:request-baskets 代码问题漏洞 (CVE-2023-27163)
Description:request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/baskets/{name}. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request.

Description

PoC for SSRF in request-baskets v1.2.1 (CVE-2023-27163)

Readme

# CVE-2023-27163
This is a PoC for [CVE-2023-27163](https://github.com/advisories/GHSA-58g2-vgpg-335q) which is a SSRF vulnerability present in [request-baskets](https://github.com/darklynx/request-baskets) upto `v1.2.1`. 
This vulnerability allows attackers to access sensitive network resources via `/api/baskets/{name}`. 
The request-baskets contains a functionality where a user can specify another server to forward the requests. 

The issue here is that the user can also specify unintended services, such as network-closed internal applications.

## Usage
```
$ python3 CVE-2023-27163.py --help
Usage: python3 CVE-2023-27163.py <URL> <TARGET>

Arguments:
URL		main path (/) of the server (eg. http://node-app:55555)
TARGET		r-baskets target server (eg. http://127.0.0.1:80)
```

## References
- [https://github.com/darklynx/request-baskets](https://github.com/darklynx/request-baskets)
- [https://notes.sjtu.edu.cn/s/MUUhEymt7](https://notes.sjtu.edu.cn/s/MUUhEymt7)
- [https://nvd.nist.gov/vuln/detail/CVE-2023-27163](https://nvd.nist.gov/vuln/detail/CVE-2023-27163)
- [https://github.com/advisories/GHSA-58g2-vgpg-335q](https://github.com/advisories/GHSA-58g2-vgpg-335q)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!