CyberRota Analysis
AI-GeneratedSkipper's OpenPolicyAgent integration prior to version 0.26.10 is vulnerable to a request-body inspection bypass, allowing attackers to send malicious payloads in HTTP/1.1 Transfer-Encoding: chunked and HTTP/2 requests without detection. This could lead to unauthorized access or manipulation of data, posing significant risks to applications relying on Skipper for security. Organizations using affected versions should prioritize upgrading to version 0.26.10 to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.26.10, zalando/skipper's OpenPolicyAgent integration silently bypasses request-body inspection on HTTP/1.1 Transfer-Encoding: chunked and HTTP/2 requests that omit the content-length pseudo-header, because the opaAuthorizeRequestWithBody filter and OpenPolicyAgentInstance.ExtractHttpBodyOptionally in filters/openpolicyagent/openpolicyagent.go produce an empty raw_body and input.parsed_body while the upstream service receives the full attacker-controlled body. This issue is fixed in version 0.26.10.