Vinades NukeViet Server-Side Request Forgery Vulnerability in Module Handler

A server-side request forgery (SSRF) vulnerability has been identified in Vinades NukeViet versions prior to 4.5.06. The issue resides in the Module Handler, specifically within the file '/admin/index.php?language=en&nv=upload'. This vulnerability allows remote attackers to manipulate server requests, potentially accessing internal resources or services.

Impact

Exploitation of this vulnerability allows for server-side request forgery, where an attacker can make the server send requests to internal services or resources, bypassing network restrictions.

Reproduction

To reproduce this vulnerability, an account with 'Module Administrator' privileges is required. Once logged in, navigate to the 'upload' endpoint of the 'banners' module. Select the 'Remote upload' option and enter an internal URL pointing to a file, such as an archive or document. After uploading, the file will be accessible for download.