CVE-2022-25850: Server-side Request Forgery (SSRF) in ProxyScotch
Summary
CVE-2022-25850: ProxyScotch is vulnerable to a server-side Request Forgery (SSRF). Affects github.com/hoppscotch/proxyscotch versions < 1.0.0. Fixed in 1.0.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
ProxyScotch is a simple proxy server created for hoppscotch.io. It is written in Go and is used to handle HTTP requests. The package github.com/hoppscotch/proxyscotch is vulnerable to a server-side Request Forgery (SSRF) when interceptor mode is set to proxy. SSRF occurs when an HTTP request is made by a backend server to an untrusted URL submitted by a user. In the case of ProxyScotch, this vulnerability can lead to a leakage of sensitive information from the server.
Vulnerability Detail
The vulnerability in ProxyScotch arises due to the lack of proper validation and sanitization of user-supplied URLs. When the interceptor mode is set to proxy, the backend server blindly makes HTTP requests to URLs provided by users without verifying their legitimacy. This allows an attacker to craft malicious requests that can access internal resources, potentially leading to data exfiltration or further exploitation of the server. The severity of this vulnerability is rated as HIGH with a CVSS score of 7.5.
How To Fix
Minimum fixed version
1.0.0
This is the first release that contains the fix.
go get github.com/hoppscotch/proxyscotch@v1.0.0Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If updating to the latest version is not immediately feasible, a temporary workaround is to disable the interceptor mode or restrict the URLs that can be accessed by the backend server. By limiting the allowed URLs to trusted sources, the risk of SSRF attacks can be mitigated. However, this is only a temporary solution, and it is strongly advised to update to the latest version as soon as possible.
Conclusion
ProxyScotch, a simple proxy server used by hoppscotch.io, is vulnerable to a server-side Request Forgery (SSRF) when interceptor mode is set to proxy. This can lead to the leakage of sensitive information from the server. To mitigate this vulnerability, it is recommended to update to the latest version of the package (1.0.0 or later). If immediate update is not possible, disabling the interceptor mode or restricting the allowed URLs can serve as a temporary workaround. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for github.com/hoppscotch/proxyscotch →
FAQ
Server-side Request Forgery (SSRF) is a vulnerability that allows an attacker to make requests from a server to arbitrary URLs, potentially accessing internal resources and leaking sensitive information.
The vulnerability in ProxyScotch can lead to the leakage of sensitive information from the server. This can include credentials, internal IP addresses, and other confidential data.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities, providing valuable insights without requiring access to the code or installation.
Yes, the CVSS score for this vulnerability is 7.5, indicating a high severity level.
At the time of this report, there are no known public exploits specifically targeting this vulnerability in ProxyScotch. However, it is crucial to patch the vulnerability as soon as possible to prevent potential exploitation.
