CVE-2023-27163

MediumCVSS 6.5

Published: 31/03/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

6.98%

93th percentile - higher than 93% of all known CVEs

Summary

A Server-Side Request Forgery (SSRF) vulnerability was discovered in request-baskets up to version 1.2.1 via the /api/baskets/{name} component. Attackers can access network resources and sensitive information by crafting a malicious API request.

Risk Assessment

The risk involves unauthorized access to internal network resources and potential leakage of sensitive data, which could lead to further attacks on the organization's infrastructure.

Recommendation

Immediately update request-baskets to the latest available version that fixes this vulnerability, and restrict API access to trusted IP addresses only.

Original NVD description (English source)

request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/baskets/{name}. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request.