CVE-2023-27163: Rbaskets Request Baskets

Medium severity, CVSS 6.5. EPSS: 6.6% chance of exploitation in the next 30 days.

request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/baskets/{name}. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request.

Affected products

  • Rbaskets Request Baskets: up to and including 1.2.1

Published 2023-03-31. Last modified 2026-07-09.