CVE-2023-40017: Geonode Server Side Request Forgery vulnerability
First published: Thu Aug 24 2023(Updated: )
### Summary A server side request forgery vuln was found within geonode when testing on a bug bounty program. Server side request forgery allows a user to request information on the internal service/services. ### Details The endpoint /proxy/?url= does not properly protect against SSRF. when using the following format you can request internal hosts and display data. /proxy/?url=http://169.254.169.254\@whitelistedIPhere. This will state wether the AWS internal IP is alive. If you get a 404, the host is alive. A non alive host will not display a response. To display metadata, use a hashfrag on the url /proxy/?url=http://169.254.169.254\@#whitelisteddomain.com or try /proxy/?url=http://169.254.169.254\@%23whitelisteddomain.com ### Impact Port scan internal hosts, and request information from internal hosts.
Credit: security-advisories@github.com security-advisories@github.com security-advisories@github.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Geosolutionsgroup Geonode | >=3.2.0<=4.1.2 | |
| pip/geonode | >=3.2.0<4.2.0 | 4.2.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/GeoNode/geonode/commit/a9eebae80cb362009660a1fd49e105e7cdb499b9
- https://github.com/GeoNode/geonode/security/advisories/GHSA-rmxg-6qqf-x8mr
- https://nvd.nist.gov/vuln/detail/CVE-2023-40017
- https://github.com/pypa/advisory-database/tree/main/vulns/geonode/PYSEC-2023-269.yaml
- https://github.com/advisories/GHSA-rmxg-6qqf-x8mr (Advisory)
Frequently Asked Questions
What is CVE-2023-40017?
CVE-2023-40017 is a vulnerability in GeoNode that allows server-side request forgery, potentially enabling an attacker to port scan internal hosts and request internal resources.
What is GeoNode?
GeoNode is an open source platform for creating, sharing, and collaborating on geospatial data.
What versions of GeoNode are affected by CVE-2023-40017?
Versions 3.2.0 through 4.1.2 of GeoNode are affected by CVE-2023-40017.
How severe is CVE-2023-40017?
CVE-2023-40017 has a severity rating of high (7.5).
How can I fix CVE-2023-40017?
To fix CVE-2023-40017, it is recommended to update GeoNode to a version that includes the fix or apply the necessary patch provided by the product vendor.
- collector/nvd-api
- collector/nvd-index
- agent/type
- agent/severity
- agent/weakness
- agent/title
- agent/remedy
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- collector/github-advisory-latest
- source/GitHub
- alias/GHSA-rmxg-6qqf-x8mr
- alias/CVE-2023-40017
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/references
- agent/description
- agent/softwarecombine
- agent/event
- collector/github-advisory
- collector/nvd-cve
- source/NVD
- agent/author
- agent/tags
- agent/trending
- vendor/geosolutionsgroup
- canonical/geosolutionsgroup geonode
- version/geosolutionsgroup geonode/3.2.0
- version/geosolutionsgroup geonode/4.1.2
- package-manager/pip