PT-2022-16930 · Unknown · Flyteconsole

Ehsandeep · Published 2022-05-17 · Updated 2022-05-27 · CVE-2022-24856

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions FlyteConsole versions prior to 0.52.0

Description The issue concerns server-side request forgery (SSRF) when FlyteConsole is exposed to the general internet. An attacker can exploit this to access internal metadata servers or other unauthenticated URLs, potentially leading to the passing of headers to unauthorized actors.

Recommendations For FlyteConsole versions prior to 0.52.0, update to version 0.52.0, which includes a patch that deletes the entire cors proxy as it is no longer required for the console. As a temporary workaround, consider disabling FlyteConsole's availability on the internet to minimize the risk of exploitation.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2022-24856

GHSA-WWW6-HF2V-V9M9

Affected Products

Flyteconsole

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24856.json · Exploit
• https://github.com/flyteorg/flyteconsole/pull/389 · Patch
• https://github.com/flyteorg/flyteconsole/commit/05b88ed2d2ecdb5d8a8404efea25414e57189709 · Patch
• https://osv.dev/vulnerability/CVE-2022-24856 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-24856 · Security Note
• https://github.com/flyteorg/flyteconsole/security/advisories/GHSA-www6-hf2v-v9m9 · Note
• https://github.com/flyteorg/flyteconsole/releases/tag/v0.52.0 · Note
• https://t.me/cvenotify/30805 · Telegram Post
• https://t.me/cibsecurity/42837 · Telegram Post