CVE-2023-25753
Last modified
CVE-2023-25753 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. There exists an SSRF (Server-Side Request Forgery) vulnerability located at the /sandbox/proxyGateway endpoint. This vulnerability allows us to manipulate arbitrary requests and retrieve corresponding responses by inputting any URL into the requestUrl parameter. Of particular concern is our ability to exert control over the HTTP method, cookies, IP address, and headers. EPSS estimates a 0.84% chance of exploitation in the next 30 days.
Description
There exists an SSRF (Server-Side Request Forgery) vulnerability located at the /sandbox/proxyGateway endpoint. This vulnerability allows us to manipulate arbitrary requests and retrieve corresponding responses by inputting any URL into the requestUrl parameter. Of particular concern is our ability to exert control over the HTTP method, cookies, IP address, and headers. This effectively grants us the capability to dispatch complete HTTP requests to hosts of our choosing. This issue affects Apache ShenYu: 2.5.1. Upgrade to Apache ShenYu 2.6.0 or apply patch https://github.com/apache/shenyu/pull/4776 .
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Apache | Shenyu | 2.5.1 |
References
- https://lists.apache.org/thread/chprswxvb22z35vnoxv9tt3zknsm977dMailing List, Vendor Advisory
- https://lists.apache.org/thread/chprswxvb22z35vnoxv9tt3zknsm977dMailing List, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-25753?
How severe is CVE-2023-25753?
How do I fix CVE-2023-25753?
How Strix Helps
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-25748By displaying a prompt with a long description, the fullscre…4.3
- CVE-2023-25749Android applications with unpatched vulnerabilities can be l…4.3
- CVE-2023-2575Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 …8.8
- CVE-2023-25750Under certain circumstances, a ServiceWorker's offline cache…4.3
- CVE-2023-25751Sometimes, when invalidating JIT code while following an ite…6.5
- CVE-2023-25752When accessing throttled streams, the count of available byt…6.5
- CVE-2023-25754Privilege Context Switching Error vulnerability in Apache So…9.8
- CVE-2023-25755Screen Creator Advance 2 Ver.0.1.1.4 Build01A and earlier is…7.8
- CVE-2023-25756Out-of-bounds read in the BIOS firmware for some Intel(R) Pr…8
- CVE-2023-25757Improper access control in some Intel(R) Unison(TM) software…7.2
- CVE-2023-25758Onekey Touch devices through 4.0.0 and Onekey Mini devices t…4.2
- CVE-2023-25759OS Command Injection in TripleData Reporting Engine in Tripl…5.4
Are you affected by CVE-2023-25753?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST