Page Replica Server-Side Request Forgery Vulnerability in Sitemap Fetch Endpoint

A server-side request forgery (SSRF) vulnerability has been identified in Page Replica versions prior to e4a7f52e75093ee318b4d5a9a9db6751050d2ad0. The issue arises in the Endpoint component, specifically within the sitemap.fetch function of the /sitemap file. The vulnerability allows remote attackers to manipulate the url parameter, leading to unauthorized outbound requests from the server to attacker-specified locations. This could be exploited to access internal services, cloud metadata, or other restricted resources.

Impact

Exploitation of this vulnerability could allow access to internal network services, exposure of cloud instance metadata, and interaction with privileged internal APIs. Additionally, it could enable reconnaissance of internal networks or abuse of the server as a proxy for external scanning.