CyberRota Analysis
AI-GeneratedCoolify versions prior to 4.0.0-beta.474 are vulnerable due to insufficient validation of S3 storage endpoints, allowing authenticated users with storage management permissions to exploit this flaw and access internal or metadata-service URLs. This could lead to unauthorized information disclosure or manipulation of sensitive data. Organizations using Coolify for server and application management should prioritize upgrading to the fixed version to mitigate potential risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.474, S3 storage endpoint validation only checks URL format and testConnection() sends a server-side request to the configured endpoint, allowing an authenticated user with storage management permissions to make Coolify request internal or metadata-service URLs. This issue is fixed in version 4.0.0-beta.474.