CyberRota Analysis
AI-GeneratedShlink is vulnerable to a server-side request forgery (SSRF) that affects authenticated API key holders, allowing them to manipulate the server into issuing arbitrary HTTP GET requests by providing specially crafted long URLs during short URL creation. This vulnerability can lead to the exfiltration of sensitive internal service information, including access to internal network resources and cloud metadata endpoints. Organizations using Shlink should prioritize addressing this issue to mitigate potential data leaks and unauthorized access to internal systems.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Shlink contains a server-side request forgery vulnerability that allows authenticated API key holders to cause the server to issue arbitrary HTTP GET requests by supplying a crafted long URL during short URL creation with title auto-resolution enabled. Attackers can submit URLs pointing to public hosts that redirect to internal targets, including loopback addresses, link-local ranges, and cloud metadata endpoints such as 169.254.169.254, to exfiltrate internal service information via the HTML title element returned in the short URL creation response.