Attack Chain

1. An attacker crafts a malicious CSS stylesheet containing an @import url(...) directive, pointing to an attacker-controlled HTTP/HTTPS server.
2. A vulnerable application, which uses the css_parser library (version 2.2.0 or earlier) to process untrusted CSS with a base_uri: option (e.g., via Premailer), encounters the malicious @import rule.
3. The css_parser library's CssParser::Parser#add_block! or Parser#load_uri! methods invoke read_remote_file with the attacker-controlled URL.
4. SSRF (Internal Network Access): The read_remote_file method makes an HTTP/HTTPS request to an internal target (e.g., http://127.0.0.1:18080/admin-credentials). If the response is CSS-shaped, its content can be exfiltrated via the application's output.
5. Local File Disclosure (LFI) Escalation: The attacker-controlled server responds with an HTTP 302 redirect, sending a Location: header pointing to a file:// URI (e.g., Location: file:///etc/nginx/nginx.conf).
6. read_remote_file recursively follows this cross-scheme redirect and directly calls File.read on the specified local file path.
7. If the content of the local file is CSS-shaped (e.g., block-style configuration files like nginx configs, HCL, Caddy), it is parsed by css_parser and its contents (selectors, declarations) become recoverable via the parser's API.
8. The application then outputs the parsed CSS (e.g., Premailer renders it into HTML), effectively exfiltrating the sensitive local file content to the attacker.

Impact

The vulnerability in css_parser allows for significant impact on systems processing untrusted CSS. Successful exploitation can lead to unauthorized access to internal network resources, including sensitive administrative interfaces and cloud metadata services (e.g., AWS IMDS, GCP/Azure equivalents). It facilitates arbitrary local file disclosure, potentially exposing critical system configurations, API keys, or other sensitive data, particularly from files structured in block-style DSLs (like nginx or HCL configuration files). Attackers can also use this flaw as a file-existence oracle to enumerate system filesystem layouts and installed software. Furthermore, the forced decompression functionality can be abused to trigger Denial of Service conditions through decompression bombs, exhausting system resources.

Recommendation

• Upgrade the css_parser gem to a patched version immediately to remediate CVE-2024-XXXX (CVE ID will be assigned).
• Implement strict input validation and sanitization for all CSS content originating from untrusted sources before it is processed by the css_parser library.
• Configure network egress filtering to prevent unexpected outbound connections from application servers to internal IP ranges, loopback addresses, or the internet, for processes that should not initiate such connections.
• Monitor application logs for unusual URI access attempts, particularly those attempting to access file:// schemes or internal HTTP/HTTPS endpoints from CSS processing functions.