Description
Razorpay IFSC Ruby gem through 2.0.62 contains a server-side request forgery vulnerability that allows attackers to redirect API requests by supplying a crafted IFSC code to IFSC.find or IFSC#get. Attackers can submit network-path references or absolute URIs that URI.join resolves as a new host, sending GET requests to internal or attacker-chosen hosts and returning parsed response fields.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Razorpay | IFSC | ≤ 2.0.62 | — |
References
- https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/rJYWKMsiMg third-party-advisory
- https://github.com/razorpay/ifsc/blob/v2.0.62/src/ruby/ifsc.rb#L53-L58 technical-description
- https://github.com/razorpay/ifsc product
- https://rubygems.org/gems/ifsc product
- VulnCheck Advisory: Razorpay IFSC Ruby gem through 2.0.62 SSRF via IFSC lookup third-party-advisory