EUVD-2026-14258
GHSA-29mf-95fh-hwxf
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
7DescriptionCVE.org
A vulnerability was determined in trueleaf ApiFlow 0.9.7. The impacted element is the function validateUrlSecurity of the file packages/server/src/service/proxy/http_proxy.service.ts of the component URL Validation Handler. This manipulation causes server-side request forgery. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.
AnalysisAI
A Server-Side Request Forgery (SSRF) vulnerability exists in the validateUrlSecurity function within trueleaf ApiFlow version 0.9.7's URL validation handler. This flaw allows unauthenticated remote attackers to manipulate server-side requests to access internal resources or perform actions on behalf of the server. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Remote unauthenticated attacker can exploit trueleaf ApiFlow 0.9.7 via the validateUrlSecurity function in URL Validation Handler without special conditions. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS score of 7.3 (High) reflects the severe impact potential with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L, indicating network-based exploitation requiring no privileges, no user interaction, and low attack complexity. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An unauthenticated attacker crafts a malicious HTTP request to the ApiFlow server containing a URL parameter pointing to an internal resource such as http://169.254.169.254/latest/meta-data/iam/security-credentials/ (AWS metadata endpoint) or http://192.168.1.100:8080/admin. The vulnerable validateUrlSecurity function fails to properly sanitize this input, causing the ApiFlow server to issue the request on the attacker's behalf, retrieving sensitive cloud credentials, internal API responses, or administrative interfaces that would normally be inaccessible from external networks. … |
| Remediation | Upgrade ApiFlow immediately to a version newer than 0.9.7 that addresses this SSRF vulnerability, checking with TrueLeaf for the latest patched release. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Inventory all systems running trueleaf ApiFlow 0.9.7 and assess their exposure to untrusted networks; immediately implement network segmentation or WAF rules to restrict access to the validateUrlSecurity endpoint. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Share
External POC / Exploit Code
Leaving vuln.today