CyberRota Analysis
AI-GeneratedWeKnora versions prior to 0.7.0 are vulnerable to Server-Side Request Forgery (SSRF) due to inadequate validation of HTTP redirect targets in the document download endpoint. This flaw allows authenticated attackers to exploit the system by redirecting requests to internal network addresses, potentially exposing sensitive internal services and cloud metadata. Organizations using WeKnora should prioritize patching to mitigate the risk of unauthorized access to their internal infrastructure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
WeKnora before 0.7.0 fails to re-validate HTTP redirect targets in the POST /api/v1/knowledge-bases/:id/knowledge/url endpoint when downloading documents from user-supplied URLs. Authenticated attackers can bypass initial SSRF validation by supplying a public URL that redirects to internal network addresses, allowing access to internal services and cloud metadata.