GitHub Advisoryadvisory · Go

GHSA-f2rj-m42r-6jm2 Skipper vulnerable to SSRF via X-Skipper-Proxy

CRITICAL Published 2022-10-25 Modified 2023-08-30 Official page ↗

Aliases: CVE-2022-38580
Ecosystem: Go
Packages: github.com/zalando/skipper
Severity: Critical
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-918
Reviewed: 2022-10-25

Affected packages

• Go github.com/zalando/skipper: < 0.13.237 → fixed in 0.13.237

Description

Impact Skipper prior to version v0.13.236 is vulnerable to server-side request forgery (SSRF). An attacker can exploit a vulnerable version of proxy to access the internal metadata server or other unauthenticated URLs by adding an specific header (X-Skipper-Proxy) to the http request. Patches The problem was patched in version https://github.com/zalando/skipper/releases/tag/v0.13.237. Users need to upgrade to skipper `>=v0.13.237`. Workarounds Use `dropRequestHeader("X-Skipper-Proxy")` filter References https://github.com/zalando/skipper/releases/tag/v0.13.237 For more information If you have any questions or comments about this advisory: • Open an issue in https://github.com/zalando/skipper/issues/new/choose • Chat with us in slack: https://app.slack.com/client/T029RQSE6/C82Q5JNH5

Related

Alias · CVE (1)

CVE-2022-38580 Zalando Skipper v0.13.236 is vulnerable to Server-Side Request Forgery (SSRF). vulnerability

Weakness · CWE (1)

CWE-918 Server-Side Request Forgery weakness

References