News for hackers. Stuff that matters.

A comment on Nginx 1.25.0: experimental HTTP/3 support. Parent comment

Re:Nginx 1.25.0: experimental HTTP/3 support by mholt on Wednesday May 24, 2023 @11:18AM (#36059332)
Have you demonstrated SSRF on a server that is not running insecure or untrusted code (i.e. is not already compromised)?

We have yet to see this, but if we do see a practical demonstration, we're happy to reconsider.

[ Parent | on HN ]
Re:Nginx 1.25.0: experimental HTTP/3 support by rekoil on Wednesday May 24, 2023 @04:11PM (#36063293)
You've never seen an application with an SSRF vulnerability? I've encountered multiple working as a penetration tester.
[ Parent | on HN ]