clinical-genomics/scout 中的 scout 存在服务器端请求伪造漏洞

The SSRF vulnerability in scout presents a significant risk because it allows an attacker to bypass security controls and interact with internal resources that should be inaccessible from the outside. An attacker could craft malicious requests to steal user cookies, gain unauthorized access to private areas of the application, or even trigger Cross-Site Scripting (XSS) attacks by injecting malicious scripts into responses. The potential blast radius extends to any internal services or APIs that scout interacts with, as the attacker can leverage the application as a proxy to reach them. This vulnerability is particularly concerning given the sensitive nature of clinical genomics data, which could be compromised through successful exploitation.

Organizations utilizing scout within their clinical genomics workflows are at risk, particularly those relying on older versions (≤v4.42). Shared hosting environments where scout is deployed alongside other applications are also vulnerable, as a compromise of one application could potentially be leveraged to exploit the SSRF vulnerability in scout. Any deployment that allows user-controlled input to be used in URL construction is potentially at risk.

• python / server:

import requests
import urllib.parse

def check_ssrf(url):
    try:
        parsed_url = urllib.parse.urlparse(url)
        if parsed_url.netloc:
            response = requests.get(url, timeout=5)
            if response.status_code != 200:
                print(f"Potential SSRF detected: {url} - Status Code: {response.status_code}")
    except requests.exceptions.RequestException as e:
        print(f"Error checking {url}: {e}")

# Example usage (replace with scout's URL generation logic)
url = "http://localhost:8000/scout/some_endpoint?url=http://internal.service/admin"
check_ssrf(url)

• generic web:

curl -I 'http://your-scout-instance/scout/some_endpoint?url=http://internal.service/admin' | grep 'internal.service'

1. 2022-05-05Disclosure

   disclosure

2. 2022-05-05Patch

   patch

1. 已保留2022-05-05
2. 发布日期2022-05-05
3. 修改日期2024-08-03
4. EPSS 更新日期2026-04-02

The primary mitigation for CVE-2022-1592 is to immediately upgrade scout to version v4.42 or later. If upgrading is not immediately feasible due to compatibility issues or testing requirements, consider implementing temporary workarounds. These may include restricting outbound network access for the scout application using a Web Application Firewall (WAF) or proxy server to only allow connections to trusted domains. Carefully review and validate all incoming data to prevent malicious URL manipulation. Implement strict input validation and sanitization to prevent attackers from crafting SSRF requests. After upgrading, confirm the fix by attempting to trigger an SSRF request and verifying that it is blocked.