Summary
A vulnerability in Vertex AI Workbench allowed attackers to take over victims' Google Cloud projects through client-side SSRF.
The initial bug involved unauthorized access to authentication tokens, which was later fixed.
A bypass was later discovered (and also fixed) using open redirects in Feedburner and CSRF token manipulation.
Affected Services
Vertex AI Workbench
Remediation
None required
Tracked CVEs
No tracked CVEs
References
Contributed by https://github.com/korniko98
Entry Status
Finalized
Disclosure Date
-
Exploitablity Period
-
Known ITW Exploitation
-
Detection Methods
-
Piercing Index Rating
-
Discovered by
Sivanesh Ashok, Sreeram KL
