CyberRota Analysis
AI-GeneratedA server-side request forgery (SSRF) vulnerability exists in the Ansible Galaxy server plugin for Pulp, allowing authenticated users with namespace management permissions to set a namespace avatar URL to any address, including internal networks and cloud metadata endpoints. This can lead to unauthorized probing of internal services and enumeration of reachable IP addresses, while the lack of an overall timeout in the HTTP client can result in denial of service by pinning background workers on slow or unresponsive targets. Organizations using this plugin should prioritize remediation to protect against potential internal network exposure and service disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A server-side request forgery (SSRF) vulnerability was found in galaxy_ng, the Ansible Galaxy server plugin for Pulp. An authenticated user with namespace management permissions can set a namespace avatar URL to an arbitrary address, including internal networks, loopback, or cloud instance metadata endpoints. A background worker fetches that URL without checking the destination, which lets the attacker probe internal services and enumerate reachable IP addresses. The HTTP client is also configured without an overall timeout, so a slow or non-responsive target can pin workers and cause a denial of service.