CyberRota Analysis
AI-GeneratedThe Verba RAG application version 2.1.3 is vulnerable to an unauthenticated server-side request forgery (SSRF) that allows attackers to send arbitrary HTTP GET requests through the WebSocket import endpoint. This can lead to the exposure of sensitive internal resources, including database endpoints and cloud instance metadata, potentially compromising credentials. Organizations using this application should prioritize patching to mitigate the risk of unauthorized access to critical internal systems.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Verba RAG application version 2.1.3 contains an unauthenticated server-side request forgery vulnerability that allows unauthenticated attackers to cause the backend to issue arbitrary HTTP GET requests by supplying attacker-controlled URLs through the WebSocket import endpoint. Attackers can connect to the /ws/import_files WebSocket endpoint without authentication, specify arbitrary URLs in the HTMLReader configuration, and cause the server to fetch internal resources such as co-located database endpoints or cloud instance metadata services to retrieve sensitive credentials.