{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3achaskiqchaskiq/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:chaskiq:chaskiq:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.6,"id":"CVE-2026-111663"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Chaskiq (\u003c= 2.0.3)"],"_cs_severities":["high"],"_cs_tags":["ssrf","graphql","web-vulnerability"],"_cs_type":"advisory","_cs_vendors":["Chaskiq"],"content_html":"\u003cp\u003eChaskiq versions up to and including 2.0.3 contain a server-side request forgery (SSRF) vulnerability identified as CVE-2026-111663. This flaw resides within the createUrlUpload GraphQL mutation, which improperly validates user-supplied URLs. An unauthenticated attacker can leverage this endpoint to force the Chaskiq server to make arbitrary HTTP requests to internal network resources, including sensitive cloud instance metadata services (e.g., 169.254.169.254). The application processes these requests and subsequently leaks the contents of the response to the attacker via an ActiveStorage blob URL. This vulnerability represents a significant risk for organizations hosting Chaskiq within cloud environments, as it may facilitate the exfiltration of instance identities, security tokens, or internal network mapping.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe vulnerability allows unauthenticated attackers to conduct SSRF attacks, potentially leading to unauthorized access to internal network infrastructure or cloud provider service metadata. If exploited, an attacker could extract sensitive configuration data or interact with internal APIs that are not exposed to the public internet, posing a high risk for data breach or deeper network compromise.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eUpgrade all instances of Chaskiq to a patched version beyond 2.0.3 immediately to address the vulnerability in the createUrlUpload mutation.\u003c/li\u003e\n\u003cli\u003eImplement network-level egress filtering on the Chaskiq application server to restrict access to internal IP ranges, specifically blocking requests to 169.254.169.254 and other private RFC1918 address spaces.\u003c/li\u003e\n\u003cli\u003eReview web server access logs for anomalous POST requests to the /graphql endpoint containing suspicious URL parameters in the createUrlUpload mutation.\u003c/li\u003e\n\u003c/ol\u003e\n","date_modified":"2026-10-16T18:49:36Z","date_published":"2026-10-16T18:49:36Z","id":"https://feed.craftedsignal.io/briefs/2026-10-chaskiq-ssrf/","summary":"Chaskiq version 2.0.3 and earlier contains a server-side request forgery vulnerability in the createUrlUpload GraphQL mutation, allowing unauthenticated attackers to access internal resources including cloud metadata services.","title":"CVE-2026-111663: SSRF Vulnerability in Chaskiq GraphQL API","url":"https://feed.craftedsignal.io/briefs/2026-10-chaskiq-ssrf/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:chaskiq:chaskiq:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}