CVE-2021-4075: Server-Side Request Forgery (SSRF) in snipe/snipe-it
Admin users on the external network can perform blind POST-based SSRF (issue requests on behalf of the server into the internal network) via the Slack Integration. This vulnerability is capable of port-scanning of the internal network, issue POST requests to web servers on the internal network which can be escalated to higher-impact.
Other sources
snipe-it is vulnerable to Server-Side Request Forgery (SSRF)
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2021-4075?
CVE-2021-4075 is a vulnerability that allows admin users on the external network to perform blind POST-based SSRF, which can lead to port-scanning and issuing POST requests on behalf of the server into the internal network.
Who is affected by CVE-2021-4075?
Admin users on the external network using Snipe-IT versions up to and including 5.3.3 are affected by CVE-2021-4075.
How severe is CVE-2021-4075?
CVE-2021-4075 has a severity rating of 7.2 out of 10, indicating a high level of severity.
How can admins mitigate the vulnerability?
Admins can mitigate the vulnerability by updating Snipe-IT to version 6.0.0-GM or newer.
What is SSRF?
SSRF stands for Server-Side Request Forgery and refers to an attack where an attacker can issue requests from the server to other internal or external resources.