CyberRota Analysis
AI-GeneratedA vulnerability in "stunnel" versions 5.79 and lower, when configured in SOCKS proxy mode, allows attackers to exploit Server-Side Request Forgery (SSRF) by bypassing localhost restrictions through the use of IPv4-mapped IPv6 addresses or unspecified addresses. This can grant unauthorized access to loopback-only services on the host, potentially exposing sensitive information or services. Organizations using affected versions of "stunnel" should prioritize patching to mitigate the risk of unauthorized access to internal resources.
Original NVD Description
A Server-Side Request Forgery (SSRF) bypass vulnerability exists in “stunnel” 5.79 and lower when configured in SOCKS proxy mode. This flaw allows a client to bypass intended localhost restrictions by using IPv4-mapped IPv6 addresses (e.g., “::ffff:127.0.0.1”) or unspecified addresses ("0.0.0.0", "::"), enabling access to loopback-only services on the "stunnel" host that should not be network-reachable.