CVE-2021-3742 Server-Side Request Forgery (SSRF) in chatwoot/chatwoot
An attacker can trigger Server-Side Request Forgery by uploading a malicious SVG avatar, potentially accessing internal resources or redirecting hosts.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2021-3742?
CVE-2021-3742 is a high-severity server-side request forgery vulnerability in chatwoot/chatwoot, published on 15 Nov 2024. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
A Server-Side Request Forgery (SSRF) vulnerability was discovered in chatwoot/chatwoot, affecting all versions prior to 2.5.0. The vulnerability allows an attacker to upload an SVG file containing a malicious SSRF payload. When the SVG file is used as an avatar and opened in a new tab, it can trigger the SSRF, potentially leading to host redirection.
Weakness: CWE-918
Which versions are affected by CVE-2021-3742?
It affects 1 product.
Products include Chatwoot Chatwoot.
How do I fix CVE-2021-3742?
No fix has been published for CVE-2021-3742 yet. Limit exposure of the affected software until one is available.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2021-3742 being exploited?
There is no known exploitation of CVE-2021-3742 in the wild and no public exploit code.
Other vulnerabilities in chatwoot/chatwoot
- CVE-2022-3741 Improper Restriction of Excessive Authentication Attempts in chatwoot/chatwoot
- CVE-2025-21628 Chatwoot has a Blind SQL-injection in Conversation and Contacts filters
- CVE-2022-0542 Cross-site Scripting (XSS) - DOM in chatwoot/chatwoot
- CVE-2022-1022 Cross-site Scripting (XSS) - Stored in chatwoot/chatwoot
- CVE-2021-3741 Stored Cross-site Scripting (XSS) in chatwoot/chatwoot
Sources
Also known as GHSA-gvwh-c4r7-8fm9.