CyberRota Analysis
AI-GeneratedAn authenticated administrator with the licensed gateway role enabled can exploit a vulnerability by supplying a malicious connector URL, leading the server to make unauthorized requests to internal network services due to inadequate validation of the URL's scheme or destination. While the severity is classified as low, organizations utilizing the gateway role should prioritize remediation to prevent potential internal network exposure. This is particularly relevant for environments where sensitive services are accessible, as it could lead to unauthorized access or data leakage.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An authenticated administrator on a node with an optional, separately licensed gateway role enabled could supply a connector URL that the server retrieved without sufficient validation of its scheme or destination, causing the server to issue requests to internal network services. Exploitation requires the licensed gateway role to be active.
Related CVEs
Other vulnerabilities affecting the same vendor(s)