lobe-chat implemented an insufficient fix for GHSA-mxhq-xw3g-rphc (CVE-2024-32964)

The SSRF vulnerability in @lobehub/chat poses a significant risk. An attacker can exploit this flaw to send requests to internal resources that are otherwise inaccessible from the outside world. This could include accessing private network services, loopback addresses, or even internal APIs. Successful exploitation could lead to data exfiltration, unauthorized access to sensitive systems, and potentially even complete compromise of the underlying infrastructure. The ability to redirect requests allows bypassing of intended security controls, expanding the attack surface considerably.

Organizations deploying @lobehub/chat in production environments, particularly those that rely on it for proxying external requests, are at significant risk. Shared hosting environments where multiple users share the same server instance are also vulnerable, as an attacker could potentially exploit the vulnerability through another user's application.

• nodejs / server:

  grep -r 'https://github.com/lobehub/lobe-chat/blob/main/src/app/api/proxy/route.ts' . 

• generic web:

  curl -I <lobehub/chat endpoint> | grep 'Location:'

1. 2024-09-23Disclosure

   disclosure

2. 2024-09-23PoC

   poc

3. 2024-09-23Patch

   patch

1. आरक्षित2024-09-17
2. प्रकाशित2024-09-23
3. संशोधित2026-02-04
4. EPSS अद्यतन2026-04-02

The primary mitigation for CVE-2024-47066 is to upgrade to version 1.19.13 or later of the @lobehub/chat component. If upgrading is not immediately feasible, consider implementing a Web Application Firewall (WAF) or proxy to filter out potentially malicious URLs containing redirects. Specifically, configure the WAF to block requests containing redirect headers or suspicious URL patterns. Thoroughly review and validate all external URLs before processing them within the application. After upgrading, confirm the fix by attempting to trigger the SSRF vulnerability with a known malicious URL and verifying that the request is blocked.