axios axios vulnerabilities and exploits

(subscribe to this query)

axios 1.7.2 allows SSRF via unexpected behavior where requests for path relative URLs get processed as protocol relative URLs.

1 Github repository

Axios up to and including 0.18.0 allows malicious users to cause a denial of service (application crash) by continuing to accepting content after maxContentLength is exceeded.

An issue discovered in Axios 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for every request made to any host allowing malicious users to view sensitive information.

Axios Axios 1.5.1

2 Github repositories

Axios NPM package 0.21.0 contains a Server-Side Request Forgery (SSRF) vulnerability where an attacker is able to bypass a proxy by providing a URL that responds with a redirect to a restricted host or IP address.

Axios Axios Siemens Sinec Ins Siemens Sinec Ins 1.0

1 Github repository

axios is vulnerable to Inefficient Regular Expression Complexity

Axios Axios Siemens Sinec Ins Siemens Sinec Ins 1.0 Oracle Goldengate

3 Github repositories

axios is a promise based HTTP client for the browser and node.js. The issue occurs when passing absolute URLs rather than protocol-relative URLs to axios. Even if ⁠baseURL is set, axios sends the request to the specified absolute URL, potentially causing SSRF and credential leaka...

1 Github repository

In axios prior to 1.7.8, lib/helpers/isURLSameOrigin.js does not use a URL object when determining an origin, and has a potentially unwanted setAttribute('href',href) call. NOTE: some parties feel that the code change only addresses a warning message from a SAST tool an...

Axios Italia Axios RE 1.7.0/7.0.0 devices have XSS via the RELogOff.aspx Error_Parameters parameter. In some situations, the XSS would be on the family.axioscloud.it cloud service; however, the vendor also supports "Sissi in Rete (con server)" for offline operation.

Axiositalia Registro Elettronico 1.7.0 Axiositalia Registro Elettronico 7.0.0

A vulnerability, which was classified as problematic, has been found in Axios Italia Axios RE 1.7.0/7.0.0. This issue affects some unknown processing of the component Error Message Handler. The manipulation leads to information disclosure (ASP.NET). The attack may be initiated re...

Axiositalia Registro Elettronico 1.7.0 Axiositalia Registro Elettronico 7.0.0

A vulnerability classified as critical was found in Axios Italia Axios RE 1.7.0/7.0.0. This vulnerability affects unknown code of the file REDefault.aspx of the component Connection Handler. The manipulation of the argument DBIDX leads to privilege escalation. The attack can be i...

Axiositalia Registro Elettronico 1.7.0 Axiositalia Registro Elettronico 7.0.0

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook