CyberRota Analysis
AI-GeneratedThe vulnerability in Paperclip prior to version 0.3.1 allows attackers to exploit improper Host header validation in default local_trusted mode, enabling arbitrary command execution through DNS rebinding. This poses a critical risk to developers running the application locally, as it can lead to unauthorized API access and command execution. Organizations using Paperclip should prioritize upgrading to mitigate this severe security threat.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Paperclip before 0.3.1 in default local_trusted mode fails to validate Host headers, allowing attackers to execute arbitrary commands via DNS rebinding. An attacker can craft a malicious webpage that, when visited by a developer running Paperclip locally, uses DNS rebinding to make authenticated API requests and execute commands through the process adapter.