Submit #813211: ItzCrazyKns Vane 1.12.1 SSRF via Model Provider baseURLinfo

TitelItzCrazyKns Vane 1.12.1 SSRF via Model Provider baseURL
BeschreibungThe POST /api/providers endpoint allows unauthenticated users to register new model providers with an arbitrary baseURL parameter. Upon registration, the server immediately initiates an HTTP request from the server side to ${baseURL}/api/tags (for Ollama-type providers) or similar endpoints for other provider types, without any validation of the target URL.
Quelle⚠️ https://github.com/ItzCrazyKns/Vane/issues/1124
Benutzer
 Yu-Bao (UID 96702)
Einreichung26.04.2026 04:00 (vor 1 Monat)
Moderieren23.05.2026 16:01 (28 days later)
StatusAkzeptiert
VulDB Eintrag365336 [ItzCrazyKns Vane bis 1.12.1 Model Provider API route.ts baseURL erweiterte Rechte]
Punkte19

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!