SSRF in Databasir
CVE-2022-31196
Databasir is a database metadata management platform. Databasir <= 1.06 has Server-Side Request Forgery (SSRF) vulnerability. The SSRF is triggered by a sending a **single** HTTP POST request to create a databaseType. By supplying a `jdbcDriverFileUrl` that returns a non `200` response code, the url is executed, the response is logged (both in terminal and in database) and is included in the response. This would allow an attackers to obtain the real IP address and scan Intranet information. This issue was fixed in version 1.0.7.
Vulnerability class: SSRF (Server-Side Request Forgery)
EPSS: 0.008 (53.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.6 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L.
Affected products
- Databasir
- Vran-dev Databasir — versions < 1.0.7
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM, Exploit, Third Party Advisory)
- security-advisories@github.com (Patch, Third Party Advisory, x_refsource_MISC)
- security-advisories@github.com (Third Party Advisory, x_refsource_MISC, Release Notes)
Frequently asked questions
- What is CVE-2022-31196?
- CVE-2022-31196 is a high-severity vulnerability in Databasir, classified under Server-Side Request Forgery (SSRF). CVSS score: 7.6/10. Published 2022-09-02.
- How severe is CVE-2022-31196?
- High severity. CVSS v3 base score is 7.6 out of 10.