PHProxy Server-Side Request Forgery Vulnerability

A Server-Side Request Forgery (SSRF) vulnerability has been identified in PHProxy versions through 1.1.1. The issue arises in the URL processing functionality, where the input validation for the _proxurl parameter can be bypassed. This vulnerability allows remote, unauthenticated attackers to submit specially crafted URLs, potentially leading to information disclosure or bypassing server-side network controls.

Impact

Exploitation of this vulnerability could result in unauthorized server-side requests, potentially allowing attackers to access internal resources or services that are not normally exposed to the public.