CyberRota Analysis
AI-GeneratedXenForo versions prior to 2.3.13 are vulnerable to a server-side request forgery (SSRF) in the PayPal REST webhook handler, allowing unauthenticated attackers to manipulate the server into making outbound HTTP requests to arbitrary destinations. This vulnerability can expose sensitive internal resources, such as cloud instance metadata services, potentially leading to the disclosure of IAM credentials or further exploitation of internal services. Organizations using affected versions should prioritize patching to mitigate the risk of unauthorized access and data breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
XenForo before 2.3.13 contains a server-side request forgery vulnerability in the PayPal REST webhook handler that allows unauthenticated attackers to cause the server to make outbound HTTP requests to arbitrary destinations by supplying a crafted certificate URL in webhook headers without scheme, hostname, or allowlist validation. Attackers can submit a crafted POST to the PayPal webhook callback endpoint to reach internal network resources including cloud instance metadata services, potentially disclosing IAM credentials or enabling secondary internal service exploitation.
Related CVEs
Other vulnerabilities affecting the same vendor(s)