← Database

CVE-2023-25230

MEDIUM CVSS: 4.9 Published: 2023-03-07 Modified: 2026-06-17

Description

A Server-Side Request Forgery (SSRF) in loonflow r2.0.14 allows attackers to force the application to make arbitrary requests via manipulation of the hook_url parameter.

Affected Platforms

Loonflow Project Loonflow

Weakness Type

CWE-918

References