send_email in graphite-web/webapp/graphite/composer/views.py in Graphite through 1.1.5 is vulnerable to...
Vulnerability Description
send_email in graphite-web/webapp/graphite/composer/views.py in Graphite through 1.1.5 is vulnerable to SSRF. The vulnerable SSRF endpoint can be used by an attacker to have the Graphite web server request any resource. The response to this SSRF request is encoded into an image file and then sent to an e-mail address that can be supplied by the attacker. Thus, an attacker can exfiltrate any information.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-18638
Credits & Attribution
No credits recorded in the NVD database.
References
- https://github.com/graphite-project/graphite-web/security/advisories/GHSA-vfj6-275q-4pvm
- https://github.com/graphite-project/graphite-web/issues/2008
- https://blog.orange.tw/2017/07/how-i-chained-4-vulnerabilities-on.html#second-bug-internal-graphite-ssrf
- https://www.youtube.com/watch?v=ds4Gp4xoaeA
- https://github.com/graphite-project/graphite-web/pull/2499
- https://lists.debian.org/debian-lts-announce/2019/10/msg00030.html
More from graphite project
View All →Affected Vendor
graphite project
View all reports →Affected Software
Timeline
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.