CVE-2020-16248

MEDIUMNuclei

Prometheus Blackbox Exporter - Server-Side Request Forgery (SSRF)

Title source: github.com
STIX 2.1 vulnerability

Record summary

CVE-2020-16248 has a selected CVSS score of 5.8 (medium); EIP currently links 1 Nuclei template.

Description

Prometheus Blackbox Exporter through 0.17.0 allows /probe?target= SSRF. NOTE: follow-on discussion suggests that this might plausibly be interpreted as both intended functionality and also a vulnerability

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Nuclei templates

1
ProjectDiscoveryMEDIUMPrometheus Blackbox Exporter - Server-Side Request Forgery (SSRF)CVSS 5.8

Prometheus Blackbox Exporter through 0.17.0 contains a server-side request forgery caused by unsanitized target parameter in /probe, letting attackers perform SSRF attacks, exploit requires sending crafted target parameter.

Impact

Attackers can perform SSRF attacks, potentially accessing internal services or causing denial of service.

Remediation

Update to version 0.17.1 or later to fix the vulnerability.

WeaknessesCWE-918
AuthorsDhiyaneshDk
Template tagscvecve2020ssrfprometheusblackbox-exporteroastoob
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
Shodan: title:"Blackbox Exporter"
FOFA: title="Blackbox Exporter"
https://github.com/prometheus/blackbox_exporter/issues/669 https://nvd.nist.gov/vuln/detail/CVE-2020-16248 https://prometheus.io/docs/operating/security/#exporters https://www.openwall.com/lists/oss-security/2020/08/08/3

Source: ProjectDiscovery

References

6