Server-Side Request Forgery in phantomjs-seo

ALTO 8.2CVE-2020-7739 · GHSA-j9pj-hx76-92v6 · Published 06/10/2020 · updated 17/06/2026

In breve

CVE-2020-7739 è una vulnerabilità ALTO (CVSS 8.2) che riguarda phantomjs-seo (phantomjs-seo project), phantomjs-seo.
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.4%, superiore al 72.6% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
phantomjs-seo phantomjs-seo_project	`= 1.0.0`	No fix yet
phantomjs-seo npm	`≤ 1.0.0`	No fix yet

Description

This affects all versions of package phantomjs-seo. It is possible for an attacker to craft a url that will be passed to a PhantomJS instance allowing for an SSRF attack.

NVD description

This affects all versions of package phantomjs-seo. It is possible for an attacker to craft a url that will be passed to a PhantomJS instance allowing for an SSRF attack.

References

nvd.nist.gov/vuln/detail/CVE-2020-7739 · ADVISORY
areverberi/phantomjs-seo · WEB
snyk.io/vuln/SNYK-JS-PHANTOMJSSEO-609638 · WEB
npmjs.com/package/phantomjs-seo · WEB

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free