Résumé
prebid-server's request forgery vulnerability allows for possible host environment data extraction
Détails de l’avis
Impact
Certain bidder adapters accept user-supplied parameters that are interpolated into outbound request URLs. Without proper input validation, a malicious actor could craft bid request parameters that cause the server to send HTTP requests to unintended destinations, potentially exposing internal network services or sensitive server endpoints to unauthorized access.
Patches
Patched in v4.4.0
Workarounds
If one is unable to update, please make sure that the affected bidder adapters are disabled.
Références
- https://github.com/advisories/GHSA-4p3g-4hcj-wpvx
- https://github.com/prebid/prebid-server/security/advisories/GHSA-4p3g-4hcj-wpvx
- https://github.com/prebid/prebid-server/pull/4802
- https://github.com/prebid/prebid-server/commit/494ac271cd4b5024df9123ef25ca3cff96390be3
- https://github.com/prebid/prebid-server/releases/tag/v4.4.0
Vulnérabilités liées
Tout Supply chain →- CRITICALCVE-2026-75856
CodeWhale: SSRF bypass - TOCTOU on DNS failure for DNS pinning
- CRITICALCVE-2026-71428
unstructured: Server-Side Request Forgery in the URL-based partitioning
- HIGHCVE-2026-65842
Plate: SSRF with response disclosure in DOCX image embedding
- HIGHCVE-2026-61704
link-preview-js DNS Rebinding SSRF Bypass / Incomplete Fix for CVE-2026-43897
- HIGHCVE-2026-75975
fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization
- HIGHCVE-2026-75899
fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding