CyberRota Analysis
AI-GeneratedA server-side request forgery vulnerability exists in the Webhook Subscription component of hyperledger-firefly versions up to 1.4.0, specifically in the ValidateOptions function. This flaw allows an attacker to manipulate the URL argument, potentially leading to remote exploitation. Organizations using affected versions should prioritize remediation, as the exploit is publicly available and poses a significant security risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was found in hyperledger-firefly firefly up to 1.4.0. The impacted element is the function ValidateOptions of the file internal/events/webhooks/webhooks.go of the component Webhook Subscription. Performing a manipulation of the argument url results in server-side request forgery. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.