CVE-2024-27927

RSSHub is an open source RSS feed generator. Prior to version 1.0.0-master.a429472, RSSHub allows remote attackers to use the server as a proxy to send HTTP GET requests to arbitrary targets and retrieve information in the internal network or conduct Denial-of-Service (DoS) attacks. The attacker can send malicious requests to a RSSHub server, to make the server send HTTP GET requests to arbitrary destinations and see partial responses. This may lead to leak the server IP address, which could be hidden behind a CDN; retrieving information in the internal network, e.g. which addresses/ports are accessible, the titles and meta descriptions of HTML pages; and denial of service amplification. The attacker could request the server to download some large files, or chain several SSRF requests in a single attacker request.

• CWE-918

• https://github.com/DIYgod/RSSHub/blob/172f6cfd2b69ea6affdbdedf61e6dde1671f3796/lib/routes/m4/index.js#L10-L14Patch
• https://github.com/DIYgod/RSSHub/blob/172f6cfd2b69ea6affdbdedf61e6dde1671f3796/lib/routes/zjol/paper.js#L7-L13Patch
• https://github.com/DIYgod/RSSHub/blob/5928c5db2472e101c2f5c3bafed77a2f72edd40a/lib/routes/mastodon/acct.js#L4-L7Patch
• https://github.com/DIYgod/RSSHub/blob/5928c5db2472e101c2f5c3bafed77a2f72edd40a/lib/routes/mastodon/utils.js#L85-L105Patch
• https://github.com/DIYgod/RSSHub/commit/a42947231104a9ec3436fc52cedb31740c9a7069Patch
• https://github.com/DIYgod/RSSHub/security/advisories/GHSA-3p3p-cgj7-vgw3Exploit, Vendor Advisory
• https://github.com/DIYgod/RSSHub/blob/172f6cfd2b69ea6affdbdedf61e6dde1671f3796/lib/routes/m4/index.js#L10-L14Patch
• https://github.com/DIYgod/RSSHub/blob/172f6cfd2b69ea6affdbdedf61e6dde1671f3796/lib/routes/zjol/paper.js#L7-L13Patch
• https://github.com/DIYgod/RSSHub/blob/5928c5db2472e101c2f5c3bafed77a2f72edd40a/lib/routes/mastodon/acct.js#L4-L7Patch
• https://github.com/DIYgod/RSSHub/blob/5928c5db2472e101c2f5c3bafed77a2f72edd40a/lib/routes/mastodon/utils.js#L85-L105Patch
• https://github.com/DIYgod/RSSHub/commit/a42947231104a9ec3436fc52cedb31740c9a7069Patch
• https://github.com/DIYgod/RSSHub/security/advisories/GHSA-3p3p-cgj7-vgw3Exploit, Vendor Advisory

Published

Mar 21, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-2792The Elementor Addon Elements plugin for WordPress is vulnera…6.4
• CVE-2024-27920projectdiscovery/nuclei is a fast and customisable vulnerabi…7.4
• CVE-2024-27921Grav is an open-source, flat-file content management system.…8.8
• CVE-2024-27922TOMP Bare Server implements the TompHTTP bare server. A vuln…9.8
• CVE-2024-27923Grav is a content management system (CMS). Prior to version …8.8
• CVE-2024-27926RSSHub is an open source RSS feed generator. Starting in ver…6.1
• CVE-2024-27928vantage6 is an open-source infrastructure for privacy preser…5.9
• CVE-2024-27929ImageSharp is a managed, cross-platform, 2D graphics library…7.1
• CVE-2024-2793The Visual Website Collaboration, Feedback & Project Managem…7.2
• CVE-2024-27930GLPI is a Free Asset and IT Management Software package, Dat…6.5
• CVE-2024-27931Deno is a JavaScript, TypeScript, and WebAssembly runtime wi…6.5
• CVE-2024-27932Deno is a JavaScript, TypeScript, and WebAssembly runtime. S…4.6