CyberRota Analysis
AI-GeneratedMegaParse 0.0.55 is vulnerable to an unauthenticated server-side request forgery (SSRF) in the POST /v1/url endpoint, allowing attackers to send internal service URLs and retrieve sensitive data without authentication. This vulnerability poses a high risk as it can expose internal services and metadata to unauthorized access. Organizations using this version of MegaParse should prioritize patching to mitigate potential data breaches and unauthorized information disclosure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
MegaParse 0.0.55 contains an unauthenticated server-side request forgery vulnerability in the POST /v1/url endpoint that fetches caller-supplied URLs server-side. Attackers can supply internal service URLs or metadata endpoints without authentication to read their responses directly from the JSON response.