Description
ClaraVerse through 0.3.1 contains server-side request forgery protection bypasses in the download_file and scrape_web agent tools. Authenticated users can bypass hostname validation and IPv6 transition address filtering to make the server request internal services and cloud instance metadata endpoints.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
claraverse-space ClaraVerse
Default version status: unaffected
0 to ≤ 0.3.1affected
References
- https://github.com/claraverse-space/ClaraVerse/issues/254 ↗
- https://github.com/claraverse-space/ClaraVerse/blob/v0.3.1/backend/internal/tools/download_file_tool.go ↗
- https://github.com/claraverse-space/ClaraVerse/blob/v0.3.1/backend/internal/security/ssrf.go ↗
- https://github.com/claraverse-space/ClaraVerse ↗
- https://www.vulncheck.com/advisories/claraverse-through-0.3.1-ssrf-protection-bypass ↗