Valuecell
Monthly
Unauthenticated server-side request forgery in ValueCell through 0.1.20 lets any party that can reach the server API set an unvalidated provider base_url and then force the backend to issue requests to attacker-chosen destinations via POST /api/v1/models/check, enabling probing of internal hosts and cloud metadata addresses, leakage of error-response content, and potential capture of stored provider API keys. The flaw is CWE-918 and rated 6.9 (Medium) under CVSS 4.0 with AV:N/AC:L/AT:N/PR:N/UI:N, meaning it is network-reachable and requires no authentication or user interaction; it is not listed in CISA KEV and no public exploit code has been identified at time of analysis, although a public technical write-up documents the attack path. Real-world impact is bounded by deployment context: the API must be reachable from an untrusted network, metadata access requires the instance to run where a link-local metadata service is exposed, and provider-key theft requires providers to already be configured with stored credentials, which our independent assessment reflects with a CVSS 3.1 vector of AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N.
Unauthenticated server-side request forgery in ValueCell through 0.1.20 lets any party that can reach the server API set an unvalidated provider base_url and then force the backend to issue requests to attacker-chosen destinations via POST /api/v1/models/check, enabling probing of internal hosts and cloud metadata addresses, leakage of error-response content, and potential capture of stored provider API keys. The flaw is CWE-918 and rated 6.9 (Medium) under CVSS 4.0 with AV:N/AC:L/AT:N/PR:N/UI:N, meaning it is network-reachable and requires no authentication or user interaction; it is not listed in CISA KEV and no public exploit code has been identified at time of analysis, although a public technical write-up documents the attack path. Real-world impact is bounded by deployment context: the API must be reachable from an untrusted network, metadata access requires the instance to run where a link-local metadata service is exposed, and provider-key theft requires providers to already be configured with stored credentials, which our independent assessment reflects with a CVSS 3.1 vector of AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N.