Open Redirect in Meeting Room Booking System

Executive Summary

This vulnerability is a server-side request forgery (SSRF) in the Meeting Room Booking System (MRBS) affecting versions prior to 1.12.2. An authenticated user can supply a private or local URI that the system attempts to fetch without proper validation. This allows reading local network resources or server-local files as if they were iCal files, though the attacker cannot see the results of the request.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check if your MRBS version is prior to 1.12.2. Run commands like 'grep -r "version" /path/to/mrbs/' or check the version in the web interface. If vulnerable, update to version 1.12.2 or later immediately.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to access internal network resources or files on the server, potentially leading to data leaks or further attacks. However, the attacker cannot view the fetched data, limiting the immediate impact to reconnaissance.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, which may violate compliance requirements such as GDPR or HIPAA if personal or health information is exposed. Organizations using affected versions should patch immediately to avoid potential regulatory penalties.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade MRBS to version 1.12.2 or later. No workarounds are available, so patching is required. Ensure the update is applied to all instances of the system to prevent exploitation.

Useful 0 Not Useful 0