An SSRF vulnerability in WWBN AVideo versions 29.0 and below allows authenticated attackers to exfiltrate data from internal network services by bypassing hostname validation.

The isSSRFSafeURL() function contains a flawed same-domain shortcircuit that only validates the hostname, allowing an authenticated attacker to specify non-standard ports to reach internal services. This bypasses SSRF protections and allows the application to save response bodies to web-accessible paths for exfiltration.

Successful exploitation of this SSRF flaw permits an attacker to interact with internal, non-public services that are otherwise protected by the network perimeter. Given the CVSS score of 7.7, this represents a high risk of unauthorized information disclosure, potentially leading to the compromise of internal credentials, configuration data, or other sensitive business assets stored within the internal network.

Immediate Action: As no official patch release is currently identified, administrators should restrict access to the AVideo instance to trusted users only and monitor for anomalous outbound requests. If possible, apply the upstream fix commit a0156a6398362086390d949190f9d52a823000ba to the source code.

Proactive Monitoring: Review web server access logs for unusual URLs or requests targeting internal loopback addresses or non-standard ports. Monitor the web-accessible directories for unexpected files created by the application that may contain exfiltrated data.

Compensating Controls: Deploy a Web Application Firewall (WAF) configured to block requests containing suspicious URL parameters or attempts to access internal IP ranges and restricted ports.

Public Exploit Available: Unknown.

This vulnerability presents a significant risk due to the potential for unauthorized access to internal infrastructure. Organizations must prioritize limiting user access to the platform and apply the identified code-level fix as soon as it is integrated into a formal release. Continuous monitoring of the server environment is essential to detect any attempts to leverage this SSRF mechanism for data exfiltration.