Vulnerability · Published Oct 19, 2023 · Assigned by apache

CVE-2023-25753Server-Side Request Forgery in Apache ShenYu

Medium 6.5

In plain English

A medium-severity server-side request forgery in Apache ShenYu from Apache Software Foundation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 67% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)6.5Medium

Exploit odds (30 days)1.1%top 33.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

There exists an SSRF (Server-Side Request Forgery) vulnerability located at the /sandbox/proxyGateway endpoint. This vulnerability allows us to manipulate arbitrary requests and retrieve corresponding responses by inputting any URL into the requestUrl parameter. Of particular concern is our ability to exert control over the HTTP method, cookies, IP address, and headers. This effectively grants us the capability to dispatch complete HTTP requests to hosts of our choosing. This issue affects Apache ShenYu: 2.5.1. Upgrade to Apache ShenYu 2.6.0 or apply patch https://github.com/apache/shenyu/pull/4776 .

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Maven	org.apache.shenyu:shenyu-admin	2.6.0	GHSA-7w8v-5fcq-pvqw
Maven	org.apache.shenyu:shenyu-common	2.6.0	GHSA-7w8v-5fcq-pvqw

Affected products (as reported)

Vendor	Product	Versions
Apache Software Foundation	Apache ShenYu	0 – through 2.5.1

Weakness: CWE-918

References

https://lists.apache.org/thread/chprswxvb22z35vnoxv9tt3zknsm977d vendor-advisory