IBM · Report #2696271
SSRF via host header let access localhost via https://go.dialexa.com
Validstatus
mediumseverity
75upvotes
3 Oct 2024disclosed
Summary
SSRF via host header was reported to IBM, analyzed and have been remediated. Thank you to our external researcher @mersa-v6.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.