CyberRota Analysis
AI-GeneratedThe vulnerability in changedetection.io versions up to 0.60.6 allows unauthenticated attackers to exploit the Goto URL action in browser steps, enabling them to access internal network addresses by supplying arbitrary URLs. This could lead to unauthorized information disclosure from restricted locations within the network. Organizations using this software should prioritize patching to mitigate potential data breaches and protect sensitive internal resources.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
changedetection.io through 0.60.6 fails to validate the Goto URL action in browser steps, allowing unauthenticated attackers to access internal addresses. Attackers can supply arbitrary internal URLs in the optional_value parameter to retrieve responses from restricted network locations.