CyberRota Analysis
AI-GeneratedThe vulnerability allows unauthenticated remote attackers to exploit the /har/test endpoint in QD versions from 20220208 to 20250803, enabling server-side request forgery (SSRF) by sending arbitrary HTTP requests to internal network resources and cloud metadata endpoints. The flaw arises from the lack of validation on user-supplied JSON for the URL scheme, host, or IP range, compounded by disabled TLS verification. Organizations using affected versions of QD should prioritize remediation to protect against potential unauthorized access to sensitive internal services.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Server-side request forgery (SSRF) in the /har/test endpoint in QD 20220208 through 20250803. Fetcher.build_request() in libs/fetcher.py constructs an httpclient.HTTPRequest from user-supplied JSON without validating URL scheme, host, or IP range. The /har/test handler does not require authentication, enabling unauthenticated remote attackers to force the QD server to send arbitrary HTTP requests to internal network resources and cloud metadata endpoints. validate_cert is set to False, disabling TLS verification.