CVE-2022-29188: Smokescreen SSRF via deny list bypass (square brackets) in Smokescreen
First published: Fri May 20 2022(Updated: )
Smokescreen is an HTTP proxy. The primary use case for Smokescreen is to prevent server-side request forgery (SSRF) attacks in which external attackers leverage the behavior of applications to connect to or scan internal infrastructure. Smokescreen also offers an option to deny access to additional (e.g., external) URLs by way of a deny list. There was an issue in Smokescreen that made it possible to bypass the deny list feature by surrounding the hostname with square brackets (e.g. `[example.com]`). This only impacted the HTTP proxy functionality of Smokescreen. HTTPS requests were not impacted. Smokescreen version 0.0.4 contains a patch for this issue.
Credit: security-advisories@github.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Stripe | <0.0.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2022-29188?
CVE-2022-29188 has been rated with moderate severity due to its potential for SSRF exploitation.
How do I fix CVE-2022-29188?
To fix CVE-2022-29188, upgrade to Smokescreen version 0.0.4 or later.
What types of attacks does CVE-2022-29188 protect against?
CVE-2022-29188 is designed to prevent server-side request forgery (SSRF) attacks.
Which software is affected by CVE-2022-29188?
CVE-2022-29188 affects versions of Stripe's Smokescreen prior to 0.0.4.
What is Smokescreen in relation to CVE-2022-29188?
Smokescreen is an HTTP proxy specifically aimed at mitigating SSRF vulnerabilities in applications.
- agent/type
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/author
- agent/remedy
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/softwarecombine
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/stripe
- canonical/stripe