CyberRota Analysis
AI-GeneratedA server-side request forgery vulnerability exists in the scaleImage function of the NASA earthdata-search 1.0.0 application, allowing remote attackers to manipulate requests. This could lead to unauthorized access to internal resources, potentially compromising sensitive data. Organizations using this application should prioritize patching or mitigating this vulnerability due to its high severity and the public availability of the exploit.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was detected in NASA earthdata-search 1.0.0. Affected by this vulnerability is the function scaleImage of the file serverless/src/scaleImage/handler.js of the component scale Endpoint. Performing a manipulation results in server-side request forgery. The attack can be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.