Server Side Request Forgery (SSRF)

2024-05-1406:24:35

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

ssrf

jinja2

code execution

vulnerability

sandbox-less environment

malicious payload

CVSS3

9.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

Percentile

9.0%

JSON

llama-cpp-python is vulnerable to Server Side Request Forgery (SSRF). The vulnerability is due to loading the chat template in a sandbox-less jinja2.Environment, allowing an attacker to execute arbitrary code by crafting a malicious payload within a model, and convincing a user intro running it.