CVE-2023-28155

The Request package through 2.88.1 for Node.js allows a bypass of SSRF mitigations via an attacker-controller server that does a cross-protocol redirect (HTTP to HTTPS, or HTTPS to HTTP). NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

• CWE-918

• https://doyensec.com/resources/Doyensec_Advisory_RequestSSRF_Q12023.pdfExploit, Patch, Technical Description, Third Party Advisory
• https://github.com/request/request/issues/3442Exploit, Issue Tracking, Patch, Technical Description, Vendor Advisory
• https://github.com/request/request/pull/3444Patch
• https://security.netapp.com/advisory/ntap-20230413-0007/
• https://doyensec.com/resources/Doyensec_Advisory_RequestSSRF_Q12023.pdfExploit, Patch, Technical Description, Third Party Advisory
• https://github.com/request/request/issues/3442Exploit, Issue Tracking, Patch, Technical Description, Vendor Advisory
• https://github.com/request/request/pull/3444Patch
• https://security.netapp.com/advisory/ntap-20230413-0007/

Published

Mar 16, 2023

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-2815A vulnerability classified as critical was found in SourceCo…9.8
• CVE-2023-28150An issue was discovered in Independentsoft JODF before 1.1.1…9.8
• CVE-2023-28151An issue was discovered in Independentsoft JSpreadsheet befo…9.8
• CVE-2023-28152An issue was discovered in Independentsoft JWord before 1.1.…9.8
• CVE-2023-28153An issue was discovered in the Kiddoware Kids Place Parental…6.4
• CVE-2023-28154Webpack 5 before 5.76.0 does not avoid cross-realm object ac…9.8
• CVE-2023-28158Privilege escalation via stored XSS using the file upload se…5.4
• CVE-2023-28159The fullscreen notification could have been hidden on Firefo…4.3
• CVE-2023-2816Consul and Consul Enterprise allowed any user with service:w…6.5
• CVE-2023-28160When following a redirect to a publicly accessible web exten…6.5
• CVE-2023-28161If temporary "one-time" permissions, such as the ability to …8.8
• CVE-2023-28162While implementing AudioWorklets, some code may have casted …8.8