CVE-2023-27163
Medium · CVSS 6.5request-baskets — Server-Side Request Forgery (SSRF)
- CVSS
- 6.5
- nvd
- EPSS
- —
- KEV
- No
- Class
- oss containerizable
- CWE-918, CWE-918
Description
request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/baskets/{name}. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request.
Search profile — drives PoC discovery
Symbols /api/baskets/{name}darklynx/request-basketsforward_urlproxy_responseexpand_pathinsecure_tls
Keywords CVE-2023-27163request-basketsSSRFrequest baskets 1.2.1server-side request forgeryrequest-baskets PoCMaltrail RCE chainbaskets API SSRFdarklynx request-baskets exploit
Versions: up to v1.2.1
Ranked PoCs (45) — best first
Heuristic ranking — not yet expert-vetted. Scored on structure + provenance, not execution.
- ★ 31entr0pie/CVE-2023-27163 needs reviewgh_search · Shell
- ★ 5samh4cks/CVE-2023-27163-InternalProber needs reviewgh_search · Python
- ★ 4seanrdev/cve-2023-27163 needs reviewgh_search · Python
- ★ 2HusenjanDev/CVE-2023-27163-AND-Mailtrail-v0.53 needs reviewgh_search · Python
- ★ 2MasterCode112/CVE-2023-27163 needs reviewgh_search · Shell
- ★ 2apaz-dev/CVE-2023-27163 needs reviewgh_search · Shell
- ★ 2
- ★ 2rvzsec/CVE-2023-27163 needs reviewgh_search · Shell
- ★ 2thomas-osgood/CVE-2023-27163 needs reviewgh_search · Go
- ★ 1
- ★ 1KharimMchatta/basketcraft needs reviewgh_search · Shell
- ★ 1ThickCoco/CVE-2023-27163-POC needs reviewgh_search · Python
- ★ 1davuXVI/CVE-2023-27163 needs reviewgh_search · Shell
- ★ 1recent activitygh_search · Python
- ★ 00xFTW/CVE-2023-27163 needs reviewtrickest
- ★ 00xabdoulaye/CTFs-Journey needs reviewtrickest
- ★ 0EssenceCyber/Exploit-List needs reviewtrickest
- ★ 0
- ★ 0Hamibubu/CVE-2023-27163 needs reviewgh_search · Python
- ★ 0Jaenact/2025_OSSCA_challenge needs reviewtrickest
- ★ 0
- ★ 0JustKhal/HackTheBox-Sau needs reviewtrickest
- ★ 0Khalidhaimur/exploit-request-baskets-1.2.1 needs reviewtrickest
- ★ 0PuddinCat/GithubRepoSpider needs reviewtrickest
- ★ 0recent activitygh_search · Python
- ★ 0Rubioo02/CVE-2023-27163 needs reviewtrickest
- ★ 0trickest
- ★ 0bl4ckarch/ssrf_to_rce_sau needs reviewtrickest
- ★ 0
- ★ 0cowsecurity/CVE-2023-27163 needs reviewgh_search · Python
- ★ 0fkie-cad/nvd-json-data-feeds needs reviewtrickest
- ★ 0hadrian3689/requests-baskets_1.2.1 needs reviewtrickest
- ★ 0infcodev/pentesting_scripts needs reviewtrickest
- ★ 0josephberger/CVE-2023-27163 needs reviewtrickest
- ★ 0lukehebe/CVE-2023-27163 needs reviewtrickest
- ★ 0madhavmehndiratta/CVE-2023-27163 needs reviewgh_search · Python
- ★ 0mathias-mrsn/request-baskets-v121-ssrf needs reviewtrickest
- ★ 0mathias-mrsn/sau needs reviewtrickest
- ★ 0mylovemyon/memo needs reviewtrickest
- ★ 0nenandjabhata/CTFs-Journey needs reviewtrickest
- ★ 0overgrowncarrot1/CVE-2023-27163 needs reviewgh_search · Shell
- ★ 0rvizx/CVE-2023-27163 needs reviewtrickest
- ★ 0
- ★ 0recent activitygh_search · Python
- ★ 0
Recall-favoring discovery; ranking by the Stage-4 scorer (Adam's rubric). Scanner/aggregator repos are hidden.
Affected packages
| Go | github.com/darklynx/request-baskets | 0 → ∞ |
References
- http://packetstormsecurity.com/files/174128/Request-Baskets-1.2.1-Server-Side-Request-Forgery.html
- http://packetstormsecurity.com/files/174129/Maltrail-0.53-Remote-Code-Execution.html
- https://gist.github.com/b33t1e/3079c10c88cad379fb166c389ce3b7b3
- https://github.com/darklynx/request-baskets
- https://notes.sjtu.edu.cn/s/MUUhEymt7
- http://packetstormsecurity.com/files/174128/Request-Baskets-1.2.1-Server-Side-Request-Forgery.html
- http://packetstormsecurity.com/files/174129/Maltrail-0.53-Remote-Code-Execution.html
- http://request-baskets.com
- https://gist.github.com/b33t1e/3079c10c88cad379fb166c389ce3b7b3
- https://github.com/darklynx/request-baskets
- https://notes.sjtu.edu.cn/s/MUUhEymt7
Status: enriched · ingested 2026-07-05T06:00:39.000Z · profiled 2026-07-05T18:30:39.000Z