CVE-2023-48711

google-translate-api-browser is an npm package which interfaces with the google translate web api. A Server-Side Request Forgery (SSRF) Vulnerability is present in applications utilizing the `google-translate-api-browser` package and exposing the `translateOptions` to the end user. An attacker can set a malicious `tld`, causing the application to return unsafe URLs pointing towards local resources. The `translateOptions.tld` field is not properly sanitized before being placed in the Google translate URL. This can allow an attacker with control over the `translateOptions` to set the `tld` to a payload such as `@127.0.0.1`. This causes the full URL to become `https://translate.google.@127.0.0.1/...`, where `translate.google.` is the username used to connect to localhost. An attacker can send requests within internal networks and the local host. Should any HTTPS application be present on the internal network with a vulnerability exploitable via a GET call, then it would be possible to exploit this using this vulnerability. This issue has been addressed in release version 4.1.3. Users are advised to upgrade. There are no known workarounds for this vulnerability.

• CWE-918

• https://github.com/cjvnjde/google-translate-api-browser/commit/33c2eac4a21c6504409e7b06dd16e6346f93d34bPatch
• https://github.com/cjvnjde/google-translate-api-browser/security/advisories/GHSA-4233-7q5q-m7p6Exploit, Third Party Advisory
• https://github.com/cjvnjde/google-translate-api-browser/commit/33c2eac4a21c6504409e7b06dd16e6346f93d34bPatch
• https://github.com/cjvnjde/google-translate-api-browser/security/advisories/GHSA-4233-7q5q-m7p6Exploit, Third Party Advisory

Published

Nov 24, 2023

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-48706Vim is a UNIX editor that, prior to version 9.0.2121, has a …4.7
• CVE-2023-48707CodeIgniter Shield is an authentication and authorization pr…6.5
• CVE-2023-48708CodeIgniter Shield is an authentication and authorization pr…6.5
• CVE-2023-48709iTop is an IT service management platform. When exporting d…8
• CVE-2023-4871A vulnerability classified as critical was found in SourceCo…9.8
• CVE-2023-48710iTop is an IT service management platform. Files from the `…9.8
• CVE-2023-48712Warpgate is an open source SSH, HTTPS and MySQL bastion host…8.8
• CVE-2023-48713Knative Serving builds on Kubernetes to support deploying an…5.3
• CVE-2023-48714Silverstripe Framework is the framework that forms the base …4.3
• CVE-2023-48715Tuleap is an open source suite to improve management of soft…5.4
• CVE-2023-48716Student Result Management System v1.0 is vulnerable to multi…9.8
• CVE-2023-48717Rejected reason: This CVE ID has been rejected or withdrawn …