Horizon Alert
Summary of the vulnerability and why it matters
This advisory describes a vulnerability in Chartbrew, an open-source application used for creating charts from data sources. The issue allows an authenticated user with specific permissions to potentially access internal network services from the Chartbrew server, which could lead to unauthorized actions or information disclosure.
- Allows authorized users to access internal services.
- Matters if Chartbrew connects to sensitive internal systems.
- Confirm relevance and exposure to internal resources.
Attack Path
How an attacker could exploit the issue
An attacker with existing authenticated access to Chartbrew can manipulate API connection settings to target internal services. By enabling a specific field during API connection creation or update, the attacker bypasses network restrictions, allowing Chartbrew to send requests to any internal HTTP service accessible from its server. This could expose sensitive information or allow unauthorized actions on internal systems, though access to cloud metadata endpoints remains protected.
- Requires authenticated user access.
- Modifying API connection settings.
- Access internal network services.
Live Threat
Current exploitation, exposure, and threat context
An authenticated user with API management permissions could manipulate Chartbrew's API connection settings to send requests to internal network services from the Chartbrew server. This could lead to the disclosure of sensitive information from internal systems or trigger unauthorized actions on those systems, when they are accessible to the Chartbrew server.
- Internal HTTP services.
- Authenticated user input allows bypassing restrictions.
- Information disclosure or unauthorized actions.
Operational Fix
Recommended remediation, mitigation, and detection steps
The Chartbrew application owner is responsible for addressing this vulnerability, as it impacts an open-source web application used for data visualization. The first practical step is to identify all Chartbrew instances, confirm their reachability and business criticality, and then locate the accountable owner to plan remediation.
- Application owners should address this.
- Verify Chartbrew instance reachability and criticality.
- Plan remediation based on identified risk.
