high
Client-Side SSRF to Google Cloud Project Takeover
Published Thu, Jan 12th, 2023
Platforms
Summary
A vulnerability in Vertex AI Workbench allowed attackers to take over victims' Google Cloud projects through client-side SSRF. The initial bug involved unauthorized access to authentication tokens, which was later fixed. A bypass was later discovered (and also fixed) using open redirects in Feedburner and CSRF token manipulation.
Affected Services
Vertex AI Workbench
Remediation
None required.
Tracked CVEs
No tracked CVEs
References
Contributed by https://github.com/korniko98
Entry Status
Finalized
Disclosure Date
-
Exploitability Period
-
Known ITW Exploitation
-
Detection Methods
None.
Piercing Index Rating
-
Discovered by
Sivanesh Ashok, Sreeram KL
