PT-2022-16904 · Unknown · Smokescreen

Grzegorz Niedziela · Published 2022-04-07 · Updated 2024-08-21 · CVE-2022-24825

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Smokescreen versions prior to 0.0.3

Description Smokescreen is a simple HTTP proxy designed to prevent server-side request forgery (SSRF) attacks by blocking access to certain URLs. It also features a deny list to restrict access to additional URLs. However, an issue was discovered that allowed attackers to bypass the deny list by appending a dot to the end of user-supplied URLs or by providing input in a different letter case. This could potentially allow external attackers to leverage the behavior of applications to connect to or scan internal infrastructure.

Recommendations Upgrade Smokescreen to version 0.0.3 or later. As a temporary workaround, consider restricting access to the deny list feature until the issue is resolved. Additionally, be cautious when handling user-supplied URLs to minimize the risk of exploitation.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2022-24825

GHSA-GCJ7-J438-HJJ2

GO-2022-0429

Affected Products

Smokescreen

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24825.json · Exploit
• https://osv.dev/vulnerability/GO-2022-0429 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-24825 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-24825 · Security Note
• https://osv.dev/vulnerability/GHSA-gcj7-j438-hjj2 · Vendor Advisory
• https://github.com/stripe/smokescreen · Note
• https://github.com/stripe/smokescreen/security/advisories/GHSA-gcj7-j438-hjj2 · Note
• https://github.com/stripe/smokescreen/commit/fafb6ae48c6c40aa011d87b61306abc48db8797b · Note
• https://t.me/cibsecurity/41134 · Telegram Post