CyberRota Analysis
AI-GeneratedThe Verba RAG application version 2.1.3 is vulnerable to a server-side request forgery (SSRF) due to a middleware bypass that allows unauthenticated attackers to manipulate HTTP requests by crafting specific Origin headers. This vulnerability enables attackers to issue arbitrary outbound requests to their own infrastructure, potentially leading to data exfiltration or further exploitation. Organizations using this application should prioritize patching this vulnerability to mitigate the risk of unauthorized access and data breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Verba RAG application version 2.1.3 contains a server-side request forgery vulnerability combined with a same-origin middleware bypass that allows unauthenticated remote attackers to make the server issue arbitrary HTTP requests by supplying a crafted Origin header and attacker-controlled host and port values. Attackers can bypass the localhost origin check in the API middleware by sending any Origin value prefixed with ' regardless of port, then submit arbitrary host and port parameters to the /api/connect endpoint to cause the server to issue outbound GET requests to attacker-controlled infrastructure.