Description
OpenMAIC before 1.0.1 skips server-side request forgery validation in non-production builds, allowing unauthenticated attackers to reach cloud instance metadata services. Attackers can supply arbitrary provider URLs via the x-base-url header or baseUrl parameter to access sensitive cloud credentials and metadata.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
THU-MAIC OpenMAIC
Default version status: unaffected
0 to < 1.0.1affected1.0.1unaffected
pkg:github/THU-MAIC/OpenMAICReferences
- https://github.com/THU-MAIC/OpenMAIC/security/advisories/GHSA-9m7h-vh2h-rc3w ↗
- https://github.com/THU-MAIC/OpenMAIC/blob/v1.0.0/middleware.ts#L60-L63 ↗
- https://github.com/THU-MAIC/OpenMAIC/blob/v1.0.0/app/api/generate/image/route.ts#L73-L78 ↗
- https://github.com/THU-MAIC/OpenMAIC/releases/tag/v1.0.1 ↗
- https://github.com/THU-MAIC/OpenMAIC ↗
- https://www.vulncheck.com/advisories/openmaic-before-1.0.1-ssrf-via-environment-gated-url-validation ↗