Executive brief
Eclipse CSI - PIA, a tool used for managing Software Bill of Materials (SBOM), contains a security flaw in how it handles authentication tokens. An unauthenticated attacker can send a specially crafted request that forces the server to connect to internal or external systems of the attacker's choosing. This could be used to probe internal network services or access sensitive cloud metadata, potentially leading to further attacks on the organization's infrastructure.
Technical details
An unauthenticated SSRF vulnerability exists in the `POST /v1/upload/sbom` endpoint of Eclipse CSI - PIA. The application validates the `iss` (issuer) claim of a Bearer JWT against an allowlist using Python's `urlparse`. However, a parsing differential exists between `urlparse` and the `requests`/`urllib3` libraries used for subsequent OIDC discovery. By including a backslash in the authority string (e.g., `https://attacker-host\@ci.eclipse.org/`), an attacker can bypass the allowlist check while forcing the server to perform OIDC discovery and JWKS retrieval from an arbitrary host, port, and scheme. This is a blind SSRF that can be used for internal port scanning or reaching cloud metadata endpoints. The issue is fixed in version 0.6.0.
Affected products
- Eclipse Foundation Eclipse CSI - PIA 0.4.0 to 0.5.0
Timeline
- 2026-07-30: advisory
- 2026-07-30: disclosed
- 2026-07-30: patched