Description
ValueCell through 0.1.20 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to direct backend requests by setting an unvalidated provider base_url. Attackers can set base_url via the provider config endpoint and trigger POST /api/v1/models/check to reach internal or metadata addresses, read error responses, and capture stored provider API keys.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
ValueCell-ai ValueCell
Default version status: unaffected
0 to ≤ 0.1.20affected
pkg:github/ValueCell-ai/valuecellReferences
- https://hackmd.io/@hieuPenguinnn/valuecell-model-provider-check-unauth-ssrf ↗
- https://github.com/ValueCell-ai/valuecell/blob/v0.1.20/python/valuecell/server/api/routers/models.py#L216-L261 ↗
- https://github.com/ValueCell-ai/valuecell/blob/v0.1.20/python/valuecell/server/api/routers/models.py#L569 ↗
- https://github.com/ValueCell-ai/valuecell ↗
- https://www.vulncheck.com/advisories/valuecell-through-0.1.20-unauthenticated-ssrf-via-api-v1-models-check ↗