CVE-2022-31196CWE-918

Server-Side Request Forgery (SSRF) vulnerability in Databasir

High · published September 2, 2022

CVSS v3.1
7.6
EPSS
1%
Percentile
63.7
In the wild
Unconfirmed
What it is

Databasir is a database metadata management platform. Databasir <= 1.06 has Server-Side Request Forgery (SSRF) vulnerability. The SSRF is triggered by a sending a **single** HTTP POST request to create a databaseType. By supplying a `jdbcDriverFileUrl` that returns a non `200` response code, the url is executed, the response is logged (both in terminal and in database) and is included in the response. This would allow an attackers to obtain the real IP address and scan Intranet information. This issue was fixed in version 1.0.7.

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.01039 · 63.7th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2022-09-02T19:45Z
EPSS history
Timeline
  • 02 SEP 19:45Z
    Server-Side Request Forgery (SSRF) vulnerability in Databasir
    cvelistv5