CVE-2022-29180: Charm vulnerable to server-side request forgery (SSRF)
A vulnerability in which attackers could forge HTTP requests to manipulate the charm data directory to access or delete anything on the server. This has been patched and is available in release v0.12.1. We recommend that all users running self-hosted charm instances update immediately. This vulnerability was found in-house and we haven't been notified of any potential exploiters. ### Additional notes Encrypted user data uploaded to the Charm server is safe as Charm servers cannot decrypt user data. This includes filenames, paths, and all key-value data. Users running the official Charm Docker images are at minimal risk because the exploit is limited to the containerized filesystem.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2022-29180?
CVE-2022-29180 is a vulnerability in which attackers could forge HTTP requests to manipulate the `charm` data directory to access or delete anything on the server.
How severe is CVE-2022-29180?
CVE-2022-29180 has a severity value of 9.8, which is considered critical.
Has CVE-2022-29180 been patched?
Yes, CVE-2022-29180 has been patched and the fix is available in release v0.12.1 of Charm.
Where can I find the patch for CVE-2022-29180?
The patch for CVE-2022-29180 can be found in release v0.12.1 of Charm, available at https://github.com/charmbracelet/charm/releases/tag/v0.12.1.
How can I protect myself from CVE-2022-29180?
To protect yourself from CVE-2022-29180, ensure that you update to version 0.12.1 or later of Charm.