CyberRota Analysis
AI-GeneratedA server-side request forgery vulnerability in Progress MarkLogic Server versions prior to 11.3.6 and 12.0.3 allows authenticated users with low privileges to bypass security measures protecting cloud instance metadata endpoints. This could lead to the disclosure of sensitive cloud credentials, potentially compromising cloud resources associated with the affected instance. Organizations using these versions should prioritize patching to mitigate the risk of unauthorized access and resource exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A server-side request forgery vulnerability in Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with low-privileged roles to bypass protections for cloud instance metadata endpoints. Successful exploitation can disclose cloud credentials and compromise cloud resources accessible to the host instance.