CyberRota Analysis
AI-GeneratedThe Simple Machines Forum versions prior to specified commits are vulnerable to a server-side request forgery (SSRF) that allows authenticated attackers to exploit the image proxy feature. By embedding malicious URLs in BBCode image tags, attackers can trigger unauthorized internal HTTP requests, potentially accessing sensitive internal services and metadata. Organizations using affected versions should prioritize patching to mitigate the risk of internal service exposure and unauthorized data access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Simple Machines Forum 2.1 prior to commit 4bf35cf and 3.0 prior to commit b4d23df contains a server-side request forgery vulnerability in the image proxy that allows authenticated attackers to trigger internal HTTP requests by embedding attacker-controlled URLs in BBCode image tags, which the proxy fetches without validating resolved destination IPs against private address ranges, loopback, or link-local addresses. Attackers can leverage SMF's automatic HMAC signature generation for any embedded image URL to obtain valid signed proxy requests targeting internal services such as cloud instance metadata endpoints, internal web applications, and container network services.