Description
WeKnora before 0.8.2 contains a server-side request forgery vulnerability in isRestrictedIP() that misclassifies NAT64-prefixed IPv6 addresses as public. Authenticated attackers can supply URLs resolving to NAT64 encodings of internal addresses via web_fetch or URL-based knowledge import to reach internal services or cloud metadata endpoints.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Tencent WeKnora
Default version status: unaffected
0.2.11 to < 0.8.2affected
pkg:golang/github.com/Tencent/WeKnoraReferences
- https://github.com/Tencent/WeKnora/issues/4092 ↗
- https://github.com/Tencent/WeKnora/commit/ff818b681f10bc29edbc48fe35f00009dc276bfa ↗
- https://github.com/Tencent/WeKnora/commit/d7ccd5ba517cc3968e6d5000a2ab0f4b51ef1dda ↗
- https://github.com/Tencent/WeKnora/blob/3d5d8bfcdfeeea266b292b71cea616847af28d0f/internal/utils/security.go#L267-L327 ↗
- https://github.com/Tencent/WeKnora/releases/tag/v0.8.2 ↗
- https://github.com/Tencent/WeKnora ↗
- https://www.vulncheck.com/advisories/weknora-before-0.8.2-ssrf-guard-bypass-via-nat64-ipv6-addresses ↗