CNNVD-202507-2969 Information

CNNVD ID

CNNVD-202507-2969

CVE-2025-8020

  • CNNVD Published: 2025-07-23

Description (Chinese)

private-ip是Damir Mustafin个人开发者的一个检查IP地址是否为私有的工具。 private-ip存在安全漏洞,该漏洞源于允许攻击者提供解析为多播IP地址的IP或主机名,可能导致服务端请求伪造。

Description (English)

Private-ip is a private tool for checking the IP address of Damir Mustafa personal developers. There is a security loophole in the private-ip, which stems from allowing the attackers to decipher the IP or host name of the IP address, which may lead to the forgery of service requests.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

个人开发者

Published

2025-07-23

Last Modified

2026-02-24

References

https://gist.github.com/lirantal/ed18a4493ca9fe4429957c79454a9df1 https://security.snyk.io/vuln/SNYK-JS-PRIVATEIP-9510757

Share on: