CVE-2022-25850: Proxyscotch Project Proxyscotch

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

The package github.com/hoppscotch/proxyscotch before 1.0.0 are vulnerable to Server-side Request Forgery (SSRF) when interceptor mode is set to proxy. It occurs when an HTTP request is made by a backend server to an untrusted URL submitted by a user. It leads to a leakage of sensitive information from the server.

Affected products

• Proxyscotch Project Proxyscotch: before 1.0.0 (fixed in 1.0.0)

Published 2022-05-01. Last modified 2026-06-17.