LinkAce's SSRF protection can be bypassed via internal hostname resolution in LinkAce
概要
LinkAce's SSRF protection can be bypassed via internal hostname resolution in LinkAce
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
LinkAce is a self-hosted archive to collect website links. Versions prior to 2.5.3 block direct requests to private IP literals, but still performs server-side requests to internal-only resources when those resources are referenced through an internal hostname. This allows an authenticated user to trigger server-side requests to internal services reachable by the LinkAce server but not directly reachable by an external user. Version 2.5.3 patches the issue.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov