CyberRota Analysis
AI-GeneratedA server-side request forgery (SSRF) vulnerability exists in the gabehf/Koito application, allowing authenticated users to send HTTP requests to any internal or external host by manipulating the image_url parameter in the PATCH /apis/web/v1/album/{id}/image endpoint. This flaw can lead to unauthorized access to sensitive internal resources and potential data exfiltration. Organizations using this application should prioritize remediation to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A server-side request forgery (SSRF) vulnerability in gabehf/Koito through v0.3.2 allows an authenticated user to make the server perform HTTP requests to arbitrary internal or external hosts by supplying a crafted image_url value in the PATCH /apis/web/v1/album/{id}/image endpoint.