Internet Bug Bounty · Report #305974

Inappropriate URL parsing may cause security risk!

Validstatus

mediumseverity

$1,000bounty

58upvotes

12 Nov 2019disclosed

How it was found

The behaviors in parse_url and http_wrap/cURL are different 　

　 Thanks :)

SSRF

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original