CVE-2024-31223

Fides affected versions are vulnerable to a security issue involving the SERVER_SIDE_FIDES_API_URL configuration environment variable used by the Fides Privacy Center. This variable typically contains a URL with a private IP address, private domain name, and/or port. An unauthenticated attacker could exploit this vulnerability to make an HTTP GET request from the Privacy Center, disclosing the value of this server-side URL. This disclosure could provide the attacker with information on server-side ports, private IP addresses, and/or private domain names.