Description
PraisonAI before 4.6.78 contains an unauthenticated server-side request forgery vulnerability in the Jobs API /api/v1/runs endpoint. The webhook_url parameter is validated at request time but re-resolved at connection time, allowing attackers to use DNS rebinding to reach internal services with a blind SSRF attack.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MervinPraison | PraisonAI | < 4.6.78 | 4.6.78 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | praisonai | < 4.6.78 | 4.6.78 | GHSA-4w49-gwv8-fpjg |
References
- GitHub Security Advisory (GHSA-4w49-gwv8-fpjg) vendor-advisory
- VulnCheck Advisory: PraisonAI before 4.6.78 Unauthenticated SSRF via webhook_url third-party-advisory