CyberRota Analysis
AI-GeneratedA server-side request forgery (SSRF) vulnerability in stoatchat versions prior to 0.14.0 allows unauthenticated attackers to bypass DNS-based IP blocklists due to inadequate address validation in the url_is_blacklisted function. This flaw enables attackers to exploit the system by accessing unauthorized network resources, potentially leading to data leakage or further attacks. Organizations using affected versions should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
stoatchat before 0.14.0 contains a server-side request forgery (SSRF) vulnerability that allows unauthenticated network-accessible attackers to bypass the DNS-based IP blocklist by exploiting incomplete address validation in the url_is_blacklisted function, which inspects only the first resolved address while the underlying HTTP client iterates all cached addresses.