Whoogle Search vulnerabilities
2 known vulnerabilities in Whoogle Search from Benbusby. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest first
- 9.8 Critical severity
whoogle-search: Server-Side Request Forgery
Whoogle Search is a self-hosted metasearch engine. In versions 0.8.3 and prior, the `window` endpoint does not sanitize user-supplied input from the `location` variable and passes it to the `send` method which sends a `GET` request on lines 339-343 in `request
- 9.8 Critical severity
whoogle-search: Server-Side Request Forgery
Whoogle Search is a self-hosted metasearch engine. In versions prior to 0.8.4, the `element` method in `app/routes.py` does not validate the user-controlled `src_type` and `element_url` variables and passes them to the `send` method which sends a GET request o