CyberRota Analysis
AI-GeneratedThe vulnerability allows attackers to bypass server-side request forgery (SSRF) protections in WWBN AVideo by exploiting a flaw in the isSSRFSafeURL function, specifically with hex-encoded NAT64 addresses. This could enable unauthorized access to sensitive cloud metadata services and loopback interfaces, potentially leading to data exposure or further attacks. Organizations using AVideo should prioritize patching this vulnerability to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
WWBN AVideo contains a server-side request forgery filter bypass vulnerability in the isSSRFSafeURL function that fails to normalize NAT64 addresses written in hexadecimal form. Attackers can bypass SSRF protections by supplying hex-encoded NAT64 addresses like 64:ff9b::a9fe:a9fe to reach cloud metadata services and loopback interfaces.