MrDoc Server-Side Request Forgery Vulnerability

A Server-Side Request Forgery (SSRF) vulnerability has been identified in MrDoc versions through 0.95. The issue arises in the validate_url function within the app_doc/utils.py file, allowing attackers to manipulate the server into making requests to internal or external systems.

Impact

Exploitation of this vulnerability allows for Server-Side Request Forgery, where an attacker can induce the server to make requests on their behalf, potentially leading to unauthorized access to internal resources or information.

Reproduction

To reproduce this vulnerability, log into the application to obtain a valid cookie. Then, send a POST request to the /upload_doc_img/ endpoint with a JSON payload containing a URL, such as http://127.0.0.2. This request will be processed by the validate_url function, where the SSRF vulnerability can be exploited.