axios 1.7.2 allows SSRF via unexpected behavior where requests for path relative URLs get processed as protocol relative URLs.
Published: 2024-08-12
CVSS: 7.5
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Download Exploit for CVE-2024-39338 here:
Tip: Download official Tor Browser at https://www.torproject.org/download/ to access .onion links.
https://augustaverburg.nl/exploit-343-cve-2021-41183/
https://augustaverburg.nl/exploit-874-cve-2025-2945/
https://augustaverburg.nl/exploit-255-cve-2025-30406/
https://augustaverburg.nl/exploit-444-cve-2025-54798/
https://augustaverburg.nl/exploit-790-cve-2018-3646/