Benbusby vulnerabilities
We track 2 vulnerabilities in Benbusby products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 23, 2024.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest Benbusby vulnerabilities
- 9.8 Critical severity
whoogle-search: Server-Side Request Forgery
Whoogle Search is a self-hosted metasearch engine. In versions 0.8.3 and prior, the `window` endpoint does not sanitize user-supplied input from the `location` variable and passes it to the `send` method which sends a `GET` request on lines 339-343 in `request
- 9.8 Critical severity
whoogle-search: Server-Side Request Forgery
Whoogle Search is a self-hosted metasearch engine. In versions prior to 0.8.4, the `element` method in `app/routes.py` does not validate the user-controlled `src_type` and `element_url` variables and passes them to the `send` method which sends a GET request o