w3connect

clawhub:w3connect

View source
B
84/100

First Seen

Feb 19, 2026

Last Scanned

Feb 22, 2026

Findings

2

Score

84/100

MEDIUM 2

Findings (2)

MEDIUM
Localhost bypass
L18

Detects alternative representations of localhost used to bypass SSRF filters

curl http://127.0.0.1:
FIX

Prevent URL redirection from bypassing SSRF protections. Validate the final destination URL after following redirects and block redirect chains that resolve to internal addresses.

FP?

Likely FP if the match is documentation about redirect handling behavior without an actual open redirect vulnerability.

MEDIUM
Localhost bypass
L42

Detects alternative representations of localhost used to bypass SSRF filters

curl http://127.0.0.1:
FIX

Prevent URL redirection from bypassing SSRF protections. Validate the final destination URL after following redirects and block redirect chains that resolve to internal addresses.

FP?

Likely FP if the match is documentation about redirect handling behavior without an actual open redirect vulnerability.