Description (CNA)
A vulnerability was identified in NucleoidAI Nucleoid up to 0.7.10. The impacted element is the function extension.apply of the file /src/cluster.ts of the component Outbound Request Handler. Such manipulation of the argument https/ip/port/path/headers leads to server-side request forgery. The attack may be performed from remote.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| NucleoidAI / Nucleoid | affected 0.7.0; affected 0.7.1; affected 0.7.2; affected 0.7.3; affected 0.7.4; affected 0.7.5; affected 0.7.6; affected 0.7.7; affected 0.7.8; affected 0.7.9; affected 0.7.10 |
CWE
CWE-918
References
- https://vuldb.com/?id.328809
- https://vuldb.com/?ctiid.328809
- https://vuldb.com/?submit.669928
- https://github.com/lakshayyverma/CVE-Discovery/blob/main/Nucleoid.md
ADP enrichment
No English description supplied.
No references supplied.