Description
Grav API plugin before 1.0.16 contains a server-side request forgery vulnerability in webhook delivery that allows attackers to bypass hostname validation by DNS rebinding. Attackers controlling authoritative DNS for a configured webhook hostname can answer validation lookups with public addresses and delivery lookups with private addresses to reach internal network resources.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| getgrav | grav | < 1.0.16 | 1.0.16 |
References
- GitHub Security Advisory (GHSA-hq2v-cgw4-fw2w) vendor-advisory
- VulnCheck Advisory: Grav API Plugin before 1.0.16 SSRF via DNS Rebinding third-party-advisory