CyberRota Analysis
AI-GeneratedA server-side request forgery (SSRF) vulnerability allows low-privileged authenticated users with 'manage Flow' permissions to exploit the HTTP Request app's Custom Request action, enabling them to make the server fetch arbitrary URLs. This can lead to unauthorized access to internal services and sensitive metadata, posing a significant risk to the integrity and confidentiality of the system. Organizations using this application should prioritize patching to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A server-side request forgery (SSRF) vulnerability in automatisch through commit 41f3c56 allows a low-privileged authenticated user with 'manage Flow' permission to make the server fetch arbitrary URLs and retrieve the full response body via the HTTP Request app's Custom Request action.