Wyoming
Monthly
Server-side request forgery in Wyoming before 1.10.2 allows unauthenticated network-accessible attackers to redirect outbound connections from the server to arbitrary attacker-chosen hosts. The HTTP API accepted an unvalidated `uri` query parameter across multiple endpoints - including `/api/info`, `/api/speech-to-text`, and `/api/text-to-speech` - enabling full override of the server-configured backend URI with arbitrary `tcp://` or `unix://` targets. No public exploit has been identified at time of analysis, but the attack requires only a crafted HTTP request with no authentication.
Server-side request forgery in Wyoming before 1.10.2 allows unauthenticated network-accessible attackers to redirect outbound connections from the server to arbitrary attacker-chosen hosts. The HTTP API accepted an unvalidated `uri` query parameter across multiple endpoints - including `/api/info`, `/api/speech-to-text`, and `/api/text-to-speech` - enabling full override of the server-configured backend URI with arbitrary `tcp://` or `unix://` targets. No public exploit has been identified at time of analysis, but the attack requires only a crafted HTTP request with no authentication.