lobe-chat implementierte eine unzureichende Behebung für GHSA-mxhq-xw3g-rphc (CVE-2024-32964)

The SSRF vulnerability in @lobehub/chat allows an attacker to craft a malicious URL that, after redirection, targets internal resources. This could include accessing sensitive data stored on internal servers, interacting with internal APIs, or even scanning the internal network for other vulnerable services. Successful exploitation could lead to unauthorized data disclosure, privilege escalation, or complete compromise of the underlying system. The ability to bypass SSRF protections significantly expands the attack surface, making this a high-severity risk. The redirect bypass technique is similar to previously observed SSRF exploitation patterns where attackers leverage HTTP redirects to circumvent security controls.

Organizations deploying @lobehub/chat in production environments, particularly those that rely on it for proxying external requests, are at significant risk. Shared hosting environments where multiple users share the same server instance are also vulnerable, as an attacker could potentially exploit the vulnerability through another user's application.

• nodejs / server:

  grep -r 'https://github.com/lobehub/lobe-chat/blob/main/src/app/api/proxy/route.ts' . 

• generic web:

  curl -I <lobehub/chat endpoint> | grep 'Location:'

1. 2024-09-23Disclosure

   disclosure

2. 2024-09-23PoC

   poc

3. 2024-09-23Patch

   patch

1. Reserviert2024-09-17
2. Veröffentlicht2024-09-23
3. Geändert2026-02-04
4. EPSS aktualisiert2026-04-02

The primary mitigation for CVE-2024-47066 is to immediately upgrade the @lobehub/chat component to version 1.19.13 or later. If upgrading is not immediately feasible due to compatibility issues or breaking changes, consider implementing a Web Application Firewall (WAF) rule to block requests containing suspicious redirect URLs. Specifically, look for patterns involving multiple redirects or redirects to internal IP addresses. Additionally, carefully review and restrict the allowed domains and protocols for the proxy functionality within @lobehub/chat to prevent unintended external connections. After upgrading, confirm the fix by attempting to trigger the SSRF vulnerability with a known malicious redirect URL and verifying that the request is blocked.