CyberRota Analysis
AI-GeneratedThe vulnerability exists in the search-v2-api, where the authentication middleware fails to enforce authentication for requests containing an `Upgrade: websocket` header. This flaw allows unauthenticated attackers to exploit the `/federated` endpoint, potentially leading to unauthorized access to sensitive federated search results from all configured remote managed hubs. Organizations utilizing this API should prioritize patching this vulnerability to prevent information disclosure risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in search-v2-api. The authentication middleware in the affected component unconditionally skips authentication when a request includes an `Upgrade: websocket` header. An unauthenticated attacker can exploit this by sending a specially crafted HTTP POST request to the `/federated` endpoint with the `Upgrade: websocket` header. This allows the attacker to bypass authentication and access federated search results across all configured remote managed hubs, leading to information disclosure.