CyberRota Analysis
AI-GeneratedApache CloudStack's webhook module is vulnerable to a Server-Side Request Forgery (SSRF) attack, which can be exploited through malicious webhook delivery requests. This vulnerability affects versions 4.20.0.0 to 4.20.3.0 and 4.21.0.0 to 4.22.1.0, potentially allowing attackers to access internal resources. Organizations using these versions should prioritize upgrading to 4.20.3.1 or 4.22.1.1 or later to mitigate the risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Server-Side Request Forgery (SSRF) vulnerability in Apache CloudStack's webhook module, exploitable via webhook delivery requests. This issue affects Apache CloudStack: from 4.20.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to version 4.20.3.1 or 4.22.1.1 or later, which fixes the issue.
Related CVEs
Other vulnerabilities affecting the same vendor(s)