Description
stoatchat before 0.14.0 contains a server-side request forgery (SSRF) vulnerability that allows unauthenticated network-accessible attackers to bypass the DNS-based IP blocklist by exploiting incomplete address validation in the url_is_blacklisted function, which inspects only the first resolved address while the underlying HTTP client iterates all cached addresses.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
stoatchat stoatchat
Default version status: affected
0 to < 0.14.0affected
References
- https://github.com/stoatchat/stoatchat/security/advisories/GHSA-4mcc-p83c-r77q ↗
- https://github.com/stoatchat/stoatchat/releases/tag/v0.14.0 ↗
- https://github.com/stoatchat/stoatchat/security/advisories/GHSA-xhww-5g9p-vvq5 ↗
- https://www.vulncheck.com/advisories/stoatchat-ssrf-via-dns-based-ip-blocklist-bypass ↗