CVE-2022-31196
Databasir <= 1.06 has Server-Side Request Forgery (SSRF) vulnerability.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.01%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Databasir is a database metadata management platform. Databasir <= 1.06 has Server-Side Request Forgery (SSRF) vulnerability. The SSRF is triggered by a sending a **single** HTTP POST request to create a databaseType. By supplying a `jdbcDriverFileUrl` that returns a non `200` response code, the url is executed, the response is logged (both in terminal and in database) and is included in the response. This would allow an attackers to obtain the real IP address and scan Intranet information. This issue was fixed in version 1.0.7.
- CVSS 3.1
- 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 1.01% probability · 61th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-918
- Affected
- databasir/databasir
- Source
- security-advisories@github.com
References
- https://github.com/vran-dev/databasir/commit/226c20e0c9124037671a91d6b3e5083bd2462058Patch, Third Party Advisory
- https://github.com/vran-dev/databasir/releases/tag/v1.0.7Release Notes, Third Party Advisory
- https://github.com/vran-dev/databasir/security/advisories/GHSA-qvg8-427f-852qExploit, Third Party Advisory
- https://github.com/vran-dev/databasir/commit/226c20e0c9124037671a91d6b3e5083bd2462058Patch, Third Party Advisory
- https://github.com/vran-dev/databasir/releases/tag/v1.0.7Release Notes, Third Party Advisory
- https://github.com/vran-dev/databasir/security/advisories/GHSA-qvg8-427f-852qExploit, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.