CVE-2022-29188CWE-918

Smokescreen SSRF via deny list bypass (square brackets) in Smokescreen

Medium · published May 20, 2022

CVSS v3.1
5.3
EPSS
1%
Percentile
58.4
In the wild
Unconfirmed
What it is

Smokescreen is an HTTP proxy. The primary use case for Smokescreen is to prevent server-side request forgery (SSRF) attacks in which external attackers leverage the behavior of applications to connect to or scan internal infrastructure. Smokescreen also offers an option to deny access to additional (e.g., external) URLs by way of a deny list. There was an issue in Smokescreen that made it possible to bypass the deny list feature by surrounding the hostname with square brackets (e.g. `[example.com]`). This only impacted the HTTP proxy functionality of Smokescreen. HTTPS requests were not impacted. Smokescreen version 0.0.4 contains a patch for this issue.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00869 · 58.4th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2022-05-20T23:50Z
EPSS history
Timeline
  • 20 MAY 23:50Z
    Smokescreen SSRF via deny list bypass (square brackets) in Smokescreen
    cvelistv5