Unchecked Hostname Resolution Vulnerability in Pterodactyl Wings
Summary
GHSA-6rg3-8h8x-5xfv: Impact A newly implemented route allowing users to download files from remote endpoints was not properly verifying the destination hostname for user provided URLs. Affects github.com/pterodactyl/wings versions >= 1.2.0, < 1.2.1. Fixed in 1.2.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Pterodactyl Wings is a Go package that provides functionality for downloading files from remote endpoints. It is commonly used in Pterodactyl Panel, a popular open-source game server management panel. The package allows users to authenticate and download files from remote locations. However, a vulnerability has been discovered in the hostname resolution process, which could potentially allow malicious users to access local network resources that are otherwise inaccessible.
Vulnerability Detail
The vulnerability arises from a newly implemented route in Pterodactyl Wings that fails to properly verify the destination hostname for user-provided URLs. This oversight enables attackers to exploit the vulnerability and gain unauthorized access to resources on local networks. It is important to note that this vulnerability requires valid authentication credentials and is not exploitable by unauthenticated users. While the impact may be limited for instances used by trusted individuals, it is still recommended to upgrade for security purposes.
How To Fix
Minimum fixed version
1.2.1
This is the first release that contains the fix.
go get github.com/pterodactyl/wings@v1.2.1Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no available workaround for this vulnerability that does not involve modifying the Panel or Wings code. It is recommended to follow the official patch and upgrade to the latest version.
Conclusion
The unchecked hostname resolution vulnerability in Pterodactyl Wings could potentially allow unauthorized access to local network resources. While the impact is limited to instances with valid authentication credentials, it is still recommended to upgrade to the latest version of Pterodactyl Wings (version 1.2.1 or later) to mitigate the vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for github.com/pterodactyl/wings →
FAQ
No, this vulnerability requires valid authentication credentials and is not exploitable by unauthenticated users.
The vulnerability could allow malicious users to access resources on local networks that would otherwise be inaccessible. This could lead to unauthorized access to sensitive data or systems.
No, only versions 1.2.0 and earlier are affected. Users should upgrade to version 1.2.1 or later to mitigate the vulnerability.
No, there are no workarounds available that do not involve modifying the Panel or Wings code. It is recommended to upgrade to the latest version.
You can find more information about the vulnerability in the official advisory on the GitHub Advisory Database: [link to advisory]
References
Related vulnerabilities
Recent vulnerabilities recorded for github.com/pterodactyl/wings.
