CyberRota Analysis
AI-GeneratedThe vulnerability affects the Unleash open-source feature management platform, specifically in its addon and integration subsystem, which improperly handles operator-controlled parameters, allowing authenticated users with elevated permissions to send requests to internal services and potentially expose sensitive information. This could lead to unauthorized access to internal resources and data leakage. Organizations using affected versions should prioritize upgrading to versions 7.5.2, 7.6.5, or 8.0.2 to mitigate the risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Unleash is an open-source feature management platform. Prior to 7.5.2, 7.6.5, and 8.0.2, the addon and integration subsystem passes the operator-controlled parameters.url value from src/lib/addons/webhook.ts and the Slack, Microsoft Teams, Datadog, and New Relic integrations to Addon.fetchRetry in src/lib/addons/addon.ts without restricting loopback, link-local, private, or cloud metadata addresses. An authenticated actor with the root CREATE_ADDON or UPDATE_ADDON permission can cause the server to send requests from inside its network boundary, use integration event status as a blind probing oracle, forward Authorization, customHeaders, or DD-API-KEY values to an attacker-observed host, and deliver the feature-event JSON body to internal services. This issue is fixed in versions 7.5.2, 7.6.5, and 8.0.2.