Server-Side Request Forgery (SSRF) in Apache Olingo - CVE-2020-1925
Published: January 20, 2020
Vulnerability identifier: #VU24392
CSH Severity: Medium
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N]
CVE-ID: CVE-2020-1925
CWE-ID: CWE-918
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The disclosed vulnerability allows a remote attacker to perform SSRF attacks.
The vulnerability exists due to the AsyncRequestWrapperImpl class reads a URL from the Location header, and then sends a GET or DELETE request to this URL. A remote attacker can send a specially crafted HTTP request and trick the application to initiate requests to arbitrary systems.
Successful exploitation of this vulnerability may allow a remote attacker gain access to sensitive data, located in the local network or send malicious requests to other servers from the vulnerable system.
Affected software
Apache Olingo
How to mitigate CVE-2020-1925
Install updates from vendor's website.
Apache Olingo - update to 4.7.1