CyberRota Analysis
AI-GeneratedA critical Server-Side Request Forgery (SSRF) vulnerability in the Slab safeurl library allows attackers controlling a validated URL to bypass internal network restrictions by exploiting mismatches in address handling between IPv4 and IPv6. Specifically, only IPv4 addresses are checked against the blocklist, enabling potential access to restricted destinations when using IPv6 or unresolved hostnames. Organizations utilizing safeurl versions 0.1.0 and above should prioritize immediate remediation to mitigate the risk of unauthorized internal network access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Server-Side Request Forgery (SSRF) vulnerability in Slab safeurl allows an attacker who controls a validated URL to reach internal network destinations the library is configured to block. Only IPv4 addresses are matched against the reserved ranges and the blocklist. Every other address is treated as matching nothing, so a destination that is rejected in its IPv4 form is accepted when written as an IPv6 address, IPv6 entries in the blocklist never match, and a host that resolves to no IPv4 address is accepted regardless of where it points. Deployments that rely on the allowlist instead are unaffected, because there an unmatched address is rejected. This issue affects safeurl: from 0.1.0 onward.