之前 1.4.5 的 Nuxt 圖示版本因圖示擷取功能中對使用者提供的 URL 驗證不足，容易受到伺服器端請求偽造（SSRF）的威脅。攻擊者可利用此漏洞，提供指向內部或受限資源的惡意網址，可能導致未經授權的存取或資料外洩。

1.4.5以前のNuxtアイコンバージョンは、アイコン取得機能でユーザー提供URLの検証が不十分であるため、サーバーサイドリクエスト偽造(SSRF)に脆弱です。攻撃者は内部または制限されたリソースを指し示す悪意のあるURLを提供することでこの脆弱性を悪用し、不正アクセスやデータ流出につながる可能性があります。

之前 1.4.5 的Nuxt图标版本因图标获取功能中用户提供的URL验证不足，易受服务器端请求伪造（SSRF）侵害。攻击者可以通过提供指向内部或受限资源的恶意URL来利用该漏洞，可能导致未经授权的访问或数据外泄。

Nuxt Icon versions prior to 1.4.5 are vulnerable to Server-Side Request Forgery (SSRF) due to insufficient validation of user-supplied URLs in the icon fetching functionality. An attacker can exploit this vulnerability by providing a malicious URL that points to an internal or restricted resource, potentially leading to unauthorized access or data exfiltration.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Nuxt is a free and open-source framework to create full-stack web applications and websites with Vue.js.
    `nuxt/icon` provides an API to allow client side icon lookup. This endpoint is at
    `/api/_nuxt_icon/[name]`. The proxied request path is improperly parsed, allowing an attacker to change
    the scheme and host of the request. This leads to SSRF, and could potentially lead to sensitive data
    exposure. The `new URL` constructor is used to parse the final path. This constructor can be passed a
    relative scheme or path in order to change the host the request is sent to. This constructor is also very
    tolerant of poorly formatted URLs. As a result we can pass a path prefixed with the string `http:`. This
    has the effect of changing the scheme to HTTP. We can then subsequently pass a new host, for example
    `http:127.0.0.1:8080`. This would allow us to send requests to a local server. This issue has been
    addressed in release version 1.4.5 and all users are advised to upgrade. There are no known workarounds
    for this vulnerability. (CVE-2024-42352)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
114958	Nuxt 圖示< 1.4.5 伺服器端請求偽造	Web App Scanning	Component Vulnerability	2025/9/9	2025/9/9	high
114958	サーバーサイドのリクエスト偽造< 1.4.5 Nuxtアイコン	Web App Scanning	Component Vulnerability	2025/9/9	2025/9/9	high
114958	Nuxt 图标< 1.4.5 服务器端请求伪造	Web App Scanning	Component Vulnerability	2025/9/9	2025/9/9	high
114958	Nuxt Icon < 1.4.5 Server-Side Request Forgery	Web App Scanning	Component Vulnerability	2025/9/9	2025/9/9	high
414175	SCA: security update for @nuxt/icon (GHSA-cxgv-px37-4mp2)	Tenable Self-Hosted Container Security	SCA Checks	2025/1/23	2026/7/2	high
414175	SCA: security update for @nuxt/icon (GHSA-cxgv-px37-4mp2)	Tenable Cloud Security	SCA Checks	2025/1/23	2026/7/2	high

检测

插件搜索

high

high

high

high

high

high