CyberRota Analysis
AI-GeneratedA server-side request forgery (SSRF) vulnerability exists in the fetch function of the Search Endpoint component in decolua 9Router versions up to 0.5.55, allowing attackers to manipulate the baseUrl argument and initiate remote attacks. This high-severity flaw could lead to unauthorized access to internal services and data. Organizations using affected versions should prioritize applying the recommended patch to mitigate potential exploitation risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was detected in decolua 9Router up to 0.5.55. The affected element is the function fetch of the file src/shared/utils/ssrfGuard.js of the component Search Endpoint. Performing a manipulation of the argument provider_options.baseUrl results in server-side request forgery. The attack can be initiated remotely. Applying a patch is the recommended action to fix this issue.