What is GHSA-f2rj-m42r-6jm2?

GHSA-f2rj-m42r-6jm2 is a security advisory published by GitHub Security Advisories with Critical severity. Skipper vulnerable to SSRF via X-Skipper-Proxy

Which CVE IDs does GHSA-f2rj-m42r-6jm2 cover?

GHSA-f2rj-m42r-6jm2 covers the following CVE IDs: CVE-2022-38580. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-f2rj-m42r-6jm2?

GHSA-f2rj-m42r-6jm2 has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

Which products are affected by GHSA-f2rj-m42r-6jm2?

GHSA-f2rj-m42r-6jm2 affects 1 product, including: go/github.com/zalando/skipper:\u003c 0.13.237.

GHSA-f2rj-m42r-6jm2CriticalCVSS 9.8

Skipper vulnerable to SSRF via X-Skipper-Proxy

Vendor

GitHub Security Advisories

Published

October 25, 2022

Last Modified

August 30, 2023

🔗 CVE IDs covered (1)

CVE-2022-38580 →

📋 Description

Impact

Skipper prior to version v0.13.236 is vulnerable to server-side request forgery (SSRF). An attacker can exploit a vulnerable version of proxy to access the internal metadata server or other unauthenticated URLs by adding an specific header (X-Skipper-Proxy) to the http request.

Patches

The problem was patched in version https://github.com/zalando/skipper/releases/tag/v0.13.237. Users need to upgrade to skipper >=v0.13.237.

Workarounds

Use dropRequestHeader("X-Skipper-Proxy") filter

References

https://github.com/zalando/skipper/releases/tag/v0.13.237

For more information

If you have any questions or comments about this advisory:

Open an issue in https://github.com/zalando/skipper/issues/new/choose
Chat with us in slack: https://app.slack.com/client/T029RQSE6/C82Q5JNH5

🎯 Affected products1

go/github.com/zalando/skipper:< 0.13.237