Ech0 < 4.2.8 - Server-Side Request Forgery
Ech0 before 4.2.8 exposes an unauthenticated SSRF vulnerability in GET /api/website/title. The website_url query parameter is fetched server-side without validating the target host or IP address.
PoC 已收录Ech0
CVSS7.2EPSS 0.72%