CVE-2022-24856

CRITICALNuclei

Server-Side Request Forgery in FlyteConsole

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2022-24856 has a selected CVSS score of 9.1 (critical); EIP currently links 1 Nuclei template.

Description

FlyteConsole is the web user interface for the Flyte platform. FlyteConsole prior to version 0.52.0 is vulnerable to server-side request forgery (SSRF) when FlyteConsole is open to the general internet. An attacker can exploit any user of a vulnerable instance to access the internal metadata server or other unauthenticated URLs. Passing of headers to an unauthorized actor may occur. The patch for this issue deletes the entire `cors_proxy`, as this is not required for console anymore. A patch is available in FlyteConsole version 0.52.0. Disable FlyteConsole availability on the internet as a workaround.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 23, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

flyteconsole

Browse flyteorg / flyteconsole
CVE List< 0.52.0affected

Nuclei templates

1
ProjectDiscoveryHIGHFlyte Console <0.52.0 - Server-Side Request ForgeryCVSS 7.5

FlyteConsole is the web user interface for the Flyte platform. FlyteConsole prior to version 0.52.0 is vulnerable to server-side request forgery when FlyteConsole is open to the general internet. An attacker can exploit any user of a vulnerable instance to access the internal metadata server or other unauthenticated URLs. Passing of headers to an unauthorized actor may occur.

Impact

An attacker can exploit this vulnerability to perform unauthorized actions, such as accessing internal resources, bypassing security controls, or launching further attacks.

Remediation

The patch for this issue deletes the entire cors_proxy, as this is no longer required for the console. A patch is available in FlyteConsole version 0.52.0, or as a work-around disable FlyteConsole.

WeaknessesCWE-918
Authorspdteam
Template tagscve2022cveflyteconsolessrfosshackeroneflytevuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CPE: cpe:2.3:a:flyte:flyte_console:*:*:*:*:*:*:*:*
https://github.com/flyteorg/flyteconsole/security/advisories/GHSA-www6-hf2v-v9m9 https://github.com/flyteorg/flyteconsole/pull/389 https://hackerone.com/reports/1540906 https://nvd.nist.gov/vuln/detail/CVE-2022-24856 https://github.com/flyteorg/flyteconsole/commit/05b88ed2d2ecdb5d8a8404efea25414e57189709

Source: ProjectDiscovery

References

4