🎯 New Report #3522157: SSRF with bypass leads to client side hosting / vulnerabilities ( XSS and others )
🔺Severity: Medium
👽 Reporter: ferreiraklet
⭐️ Reputation: 3357
🛠 State: resolved
💼 Team: DuckDuckGo
💵 Bounty: 500
🕐 Submitted: 2026-01-23
⏰ Disclosed: 2026-09-17 22:54:11
📝 Summary: The web application was found to be vulnerable to server-side request forgery (SSRF). The SSRF vulnerability was discovered through testing with an HTTP interception proxy. The vulnerability allowed an attacker to make arbitrary HTTP requests from the server, which could potentially lead to unauthorized access or data exposure.
📂 Report JSON File: 3522157
@hackeronereports