Apache Neethi PolicyReference API Unrestricted URI Fetching Vulnerability

A vulnerability exists in Apache Neethi versions prior to 3.2.2, allowing unrestricted fetching of remote policy references through the PolicyReference API. This lack of restriction enables outbound requests to be made to arbitrary protocols and internal IP addresses. In version 3.2.2 and later, the API restricts URIs to only http or https, disallowing link-local, multicast, or any-local addresses.

Impact

Exploitation of this vulnerability could lead to unauthorized access to internal resources or services via outbound requests, potentially allowing for data exfiltration or interaction with internal systems.

Remediation

Users are advised to upgrade to Apache Neethi version 3.2.2 or later, which addresses this vulnerability.