Description (CNA)
Marqo 2.26.0 contains a server-side request forgery vulnerability in the add_documents endpoint that allows unauthenticated attackers to trigger requests to arbitrary URLs by supplying malicious media field values. Attackers can exploit download_image_from_url and fetch_content_sample functions which lack destination filtering and host validation to access internal services and cloud metadata endpoints.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| marqo-ai / marqo | affected 0 through 2.26.0 |
CWE
CWE-918
References
- https://github.com/marqo-ai/marqo/issues/1452
- https://github.com/marqo-ai/marqo
- https://github.com/marqo-ai/marqo/blob/2.26.0/components/inference_orchestrator/src/inference_orchestrator/services/media_download_and_preprocess/image_download.py
- https://www.vulncheck.com/advisories/marqo-2.26.0-server-side-request-forgery-via-media-urls
ADP enrichment
No English description supplied.
No references supplied.