Niubigeo
Monthly
Unauthenticated server-side request forgery in NiubiGEO before 0.3.2 allows remote attackers to make the server fetch loopback, private-network, link-local, or cloud metadata addresses by supplying a crafted domain value to POST /audit-plan; the fetched response is returned in the plan's siteEvidence JSON, making this a full-response read SSRF. No authentication or user interaction is required, but the endpoint must be network-reachable and the audit/site-evidence feature invoked. No public exploit code was identified at time of analysis, and the vendor has released v0.3.2 with public-URL validation and per-redirect address pinning.
Unauthenticated server-side request forgery in NiubiGEO before 0.3.2 allows remote attackers to make the server fetch loopback, private-network, link-local, or cloud metadata addresses by supplying a crafted domain value to POST /audit-plan; the fetched response is returned in the plan's siteEvidence JSON, making this a full-response read SSRF. No authentication or user interaction is required, but the endpoint must be network-reachable and the audit/site-evidence feature invoked. No public exploit code was identified at time of analysis, and the vendor has released v0.3.2 with public-URL validation and per-redirect address pinning.