PT-2022-19440 · Unknown · Smokescreen

Axel Chong · Published 2022-05-20 · Updated 2024-08-21 · CVE-2022-29188

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Smokescreen versions prior to 0.0.4

Description Smokescreen is an HTTP proxy designed to prevent server-side request forgery (SSRF) attacks. It also offers a deny list feature to restrict access to external URLs. However, an issue allowed attackers to bypass this deny list by surrounding the hostname with square brackets (e.g., [example.com]). This vulnerability only impacted the HTTP proxy functionality, and HTTPS requests were not affected.

Recommendations Upgrade to Smokescreen version 0.0.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the HTTP proxy functionality until the patch is applied. Avoid using the deny list feature with hostnames surrounded by square brackets until the issue is resolved.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2022-29188

GHSA-QWRF-GFPJ-QVJ6

GO-2022-0459

Affected Products

Smokescreen

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/29xxx/CVE-2022-29188.json · Exploit
• https://github.com/stripe/smokescreen/commit/dea7b3c89df000f4072ff9866d61d78e30df6a36 · Patch
• https://osv.dev/vulnerability/GO-2022-0459 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-29188 · Security Note
• https://osv.dev/vulnerability/CVE-2022-29188 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-qwrf-gfpj-qvj6 · Vendor Advisory
• https://github.com/stripe/smokescreen/security/advisories/GHSA-qwrf-gfpj-qvj6 · Note
• https://t.me/cibsecurity/43130 · Telegram Post