CVE-2024-4851 SSRF Vulnerability in stangirard/quivr
Attackers can exploit an SSRF vulnerability in the crawl endpoint to access internal networks and services via manipulated URL parameters.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-4851?
CVE-2024-4851 is a high-severity server-side request forgery vulnerability in stangirard/quivr, published on 6 Jun 2024. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A Server-Side Request Forgery (SSRF) vulnerability exists in the stangirard/quivr application, version 0.0.204, which allows attackers to access internal networks. The vulnerability is present in the crawl endpoint where the 'url' parameter can be manipulated to send HTTP requests to arbitrary URLs, thereby facilitating SSRF attacks. The affected code is located in the backend/routes/crawl_routes.py file, specifically within the crawl_endpoint function. This issue could allow attackers to interact with internal services that are accessible from the server hosting the application.
Weakness: CWE-918
Which versions are affected by CVE-2024-4851?
It affects 1 product.
Products include Quivr Quivr.
How do I fix CVE-2024-4851?
No fix has been published for CVE-2024-4851 yet. Limit exposure of the affected software until one is available.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2024-4851 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-4851 exists.
Other vulnerabilities in stangirard/quivr
Sources
Also known as GHSA-rcfg-x28g-p9m3.