GeoNode Server-Side Request Forgery Vulnerability via Document Upload

A server-side request forgery (SSRF) vulnerability has been identified in GeoNode versions 4.0 prior to 4.4.5 and 5.0 prior to 5.0.2. This vulnerability allows authenticated users with document upload permissions to send arbitrary outbound HTTP requests. By providing a malicious URL through the doc_url parameter during document upload, users can direct the server to make requests to internal network targets, loopback addresses, RFC1918 addresses, or cloud metadata services. The vulnerability exists without proper SSRF mitigations, such as private IP filtering or redirect validation.

Impact

Exploitation of this vulnerability allows for unauthorized outbound HTTP requests to internal resources, potentially leading to exposure of sensitive data or services.

Remediation

Users can upgrade to GeoNode versions 4.4.5 or 5.0.2 to address this vulnerability.