NiubiGEO before 0.3.2 Unauthenticated SSRF via /audit-plan domain Field
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 0.3.2
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
NiubiGEO, a geolocation tool, is affected by a flaw that lets anonymous remote users make its server request internal or cloud-metadata addresses through the audit plan feature. Attackers could then read the responses from those internal resources, which are returned in the plan's output data.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
NiubiGEO before 0.3.2 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch internal addresses by supplying a crafted domain value to POST /audit-plan. Attackers can submit IP literals, localhost, or private and link-local hosts to read loopback, internal-network, or cloud metadata responses returned in the plan's siteEvidence JSON.
Timeline
- CVE published
- First seen by cve.now
Affected versions
- Albert-Weasker niubigeo
fixed in 0.3.2