Server-Side Request Forgery (SSRF) in undici - CVE-2022-35949

Vulnerability identifier: #VU67166

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N]

CVE-ID: CVE-2022-35949

CWE-ID: CWE-918

Exploitation vector: Remote access

Exploit availability: No public exploit available

The disclosed vulnerability allows a remote attacker to perform SSRF attacks.

The vulnerability exists due to insufficient validation of user-supplied input. A remote attacker can send a specially crafted HTTP request and trick the application to initiate requests to arbitrary systems.

Successful exploitation of this vulnerability may allow a remote attacker gain access to sensitive data, located in the local network or send malicious requests to other servers from the vulnerable system.

undici
Gentoo Linux
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Storage
SUSE Linux Enterprise Module for Web Scripting
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
openSUSE Leap
Red Hat Advanced Cluster Management for Kubernetes
App Connect Enterprise Certified Container
nodejs16-debuginfo
nodejs16-docs
nodejs16
nodejs16-debugsource
nodejs16-devel
npm16
corepack16

Install updates from vendor's website.

undici - update to 5.8.2
Red Hat Advanced Cluster Management for Kubernetes - update to 2.4.8
App Connect Enterprise Certified Container - addressed in versions 1.1.8, 4.1.0
nodejs16-debuginfo - addressed in versions 16.17.0-8.9.1, 16.17.0-150300.7.9.1, 16.17.0-150400.3.6.1
nodejs16-docs - addressed in versions 16.17.0-8.9.1, 16.17.0-150300.7.9.1, 16.17.0-150400.3.6.1
nodejs16 - addressed in versions 16.17.0-8.9.1, 16.17.0-150300.7.9.1, 16.17.0-150400.3.6.1
nodejs16-debugsource - addressed in versions 16.17.0-8.9.1, 16.17.0-150300.7.9.1, 16.17.0-150400.3.6.1
nodejs16-devel - addressed in versions 16.17.0-8.9.1, 16.17.0-150300.7.9.1, 16.17.0-150400.3.6.1
npm16 - addressed in versions 16.17.0-8.9.1, 16.17.0-150300.7.9.1, 16.17.0-150400.3.6.1
corepack16 - update to 16.17.0-150400.3.6.1

• https://github.com/nodejs/undici/security/advisories/GHSA-8qr4-xgw6-wmr3
• https://github.com/nodejs/undici/releases/tag/v5.8.2
• https://github.com/nodejs/undici/commit/124f7ebf705366b2e1844dff721928d270f87895

• Multiple vulnerabilities in Undici
• SUSE update for nodejs16
• SUSE update for nodejs16
• SUSE update for nodejs16
• Multiple vulnerabilities in IBM App Connect Enterprise Certified Container
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.4
• Gentoo update for Node.js