gitroomhq/postiz-app · Security
Postiz App has a High-Severity SSRF Vulnerability via Next.js
- GHSA ID
- GHSA-vj2p-7pgw-g2wf
- Severity
- high
- Published
- Updated
- CVSS
- 7.5 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS v3
- 7.5 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
Impact
A successful SSRF attack allows an attacker to:
- Bypass firewalls to scan and interact with internal network services/ports.
- Access sensitive cloud metadata services (e.g., AWS IMDS 169.254.169.254) to potentially leak instance credentials.
- Pivot into the internal network environment where Postiz is hosted.
Workarounds
There are no workarounds known to this, please upgrade to Postiz version v2.21.1.
CWEs
- CWE-918 · Server-Side Request Forgery (SSRF)
- CWE-1395 · Dependency on Vulnerable Third-Party Component