CVE-2023-5572: Server-Side Request Forgery (SSRF) in vriteio/vrite

Q: What is CVE-2023-5572?

CVE-2023-5572 is a Server-Side Request Forgery (SSRF) vulnerability in the GitHub repository vriteio/vrite prior to version 0.3.0.

Q: How severe is CVE-2023-5572?

CVE-2023-5572 is considered a critical vulnerability with a severity score of 10.

Q: How does CVE-2023-5572 affect @vrite/sdk?

CVE-2023-5572 affects the @vrite/sdk package with versions up to, but excluding, version 0.3.0.

Q: How can CVE-2023-5572 be fixed?

To fix CVE-2023-5572, upgrade to version 0.3.0 or later of the @vrite/sdk package.

Q: Where can I find more information about CVE-2023-5572?

You can find more information about CVE-2023-5572 at the following references: [NVD](https://nvd.nist.gov/vuln/detail/CVE-2023-5572), [GitHub Commit](https://github.com/vriteio/vrite/commit/1877683b932bb33fb20d688e476284b70bb9fe23), [Huntr Bounty](https://huntr.dev/bounties/db649f1b-8578-4ef0-8df3-d320ab33f1be).

Published Oct 13, 2023

Updated

Server-Side Request Forgery (SSRF) in GitHub repository vriteio/vrite prior to 0.3.0.

Affected Software

2 affected componentsFixes available

npm/@vrite/sdk<0.3.0

0.3.0

vrite vrite<0.3.0

Remediation

Patch Available

https://github.com/vriteio/vrite/commit/1877683b932bb33fb20d688e476284b70bb9fe23

Event History

Oct 13, 2023

CVE Published

via MITRE·09:55 AM

Data Sourced

via MITRE·09:55 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:15 AM

RemedyDescriptionSeverityWeaknessAffected Software

Advisory Published

12:30 PM

Frequently Asked Questions

What is CVE-2023-5572?

CVE-2023-5572 is a Server-Side Request Forgery (SSRF) vulnerability in the GitHub repository vriteio/vrite prior to version 0.3.0.

How severe is CVE-2023-5572?

CVE-2023-5572 is considered a critical vulnerability with a severity score of 10.

How does CVE-2023-5572 affect @vrite/sdk?