CyberRota Analysis
AI-GeneratedKiteworks Secure Data Forms versions prior to 9.5.0 are susceptible to a Server-Side Request Forgery (SSRF) vulnerability, enabling unauthenticated remote attackers to send arbitrary outbound requests from the server. This flaw could facilitate access to internal services or other restricted network resources, posing a significant security risk. Organizations using affected versions should prioritize patching to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Kiteworks Secure Data Forms before version 9.5.0 is vulnerable to Server-Side Request Forgery that could allow an unauthenticated, remote attacker to make the server issue arbitrary outbound network requests and read back the responses. This could potentially be used to reach internal-only services or other network-restricted resources.