Threats tagged 'ghsa-3mhc-98p7-hp8w'

Crawl4AI versions prior to 0.9.5 have a blind server-side request forgery (SSRF) vulnerability in the Docker server API. This flaw allows API clients to bypass the egress proxy by enabling the check_cache_freshness feature. Attackers can exploit this by caching a controlled URL and then triggering the CacheValidator to follow 302 redirects or perform DNS rebinding to internal or cloud metadata service addresses, facilitating port and service discovery.