{"id":"CVE-2024-31223","aliases":["GHSA-53q7-4874-24qg","PYSEC-2026-1334"],"title":"Information Disclosure Vulnerability in Privacy Center of SERVER_SIDE_FIDES_API_URL","summary":"Information Disclosure Vulnerability in Privacy Center of SERVER_SIDE_FIDES_API_URL","severity":"medium","cvss":5.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","vendor":"ethyca-fides","product":"ethyca-fides","ecosystem":"pip","affected":["ethyca-fides >= 2.19.0, < 2.39.2"],"patched":["ethyca-fides 2.39.2"],"published":"2024-07-05","updated":"2026-09-10","sourceUpdated":"2026-09-10T03:50:16.262883603Z","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-53q7-4874-24qg","references":[{"url":"https://github.com/ethyca/fides/security/advisories/GHSA-53q7-4874-24qg"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-31223"},{"url":"https://github.com/ethyca/fides/commit/0555080541f18a5aacff452c590ac9a1b56d7097"},{"url":"https://github.com/ethyca/fides/commit/cd510216b281de5443ec1c126add95cc5be0970a"},{"url":"https://github.com/ethyca/fides"}],"tags":["osv","pip","exploit-available"],"epss":0.01105,"epssPercentile":0.64364,"exploits":{"nuclei":["CVE-2024-31223"],"checkedAt":"2026-09-24T07:52:51.403Z"},"exploitAvailable":true,"ingestedAt":"2026-07-08T18:25:45.750Z","slug":"CVE-2024-31223","body":"## Overview\n\n`SERVER_SIDE_FIDES_API_URL` is a server-side configuration environment variable used by the Fides Privacy Center to communicate with the Fides webserver backend. The value of this variable is a URL which typically includes a private IP address, private domain name, and/or port.\n\nThis vulnerability allows an unauthenticated attacker to make a HTTP GET request from the Privacy Center that discloses the value of this server-side URL.\n\n### Impact\n\nDisclosure of server-side configuration giving an attacker information on server-side ports, private IP addresses, and/or private domain names.\n\n### Patches\nThe vulnerability has been patched in Fides version `2.39.2`. Users are advised to upgrade to this version or later to secure their systems against this threat.\n\n### Workarounds\nThere are no workarounds.\n\n### Proof of Concept\n\n1. Set the value of the environment variable `FIDES_PRIVACY_CENTER__SERVER_SIDE_FIDES_API_URL` of your Fides Privacy Center container before start-up to a private value such as `https://some.private.domain.name/api/v1` and start the Privacy Center application.\n\n2. Once the application is up, perform a HTTP GET request of the Privacy Center's main page e.g. `https://privacy.example.com` . The value of `SERVER_SIDE_FIDES_API_URL` is returned in the response's body.\n\n\n```\n~ ❯ curl -s https://privacy.example.com/ | \\\ngrep '__NEXT_DATA__' | \\\nsed 's/.*<script id=\"__NEXT_DATA__\" type=\"application\\/json\">//;s/<\\/script>.*//' | \\\njq '.props.serverEnvironment.settings.SERVER_SIDE_FIDES_API_URL'\n\"https://some.private.domain.name/api/v1\"\n```\n\n## Affected packages\n\n- `ethyca-fides >= 2.19.0, < 2.39.2`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `ethyca-fides 2.39.2`","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":29.2,"likelihood":0.2,"exploitation":12,"ransomware":0},"changes":[{"seq":4712,"id":"CVE-2024-31223","ts":1788887201939,"field":"exploit_available","old":"false","new":"true"},{"seq":3595,"id":"CVE-2024-31223","ts":1788886317735,"field":"exploit_available","old":"true","new":"false"},{"seq":2449,"id":"CVE-2024-31223","ts":1788882986396,"field":"exploit_available","old":"false","new":"true"},{"seq":1478,"id":"CVE-2024-31223","ts":1788882399776,"field":"exploit_available","old":"true","new":"false"},{"seq":592,"id":"CVE-2024-31223","ts":1788881836591,"field":"exploit_available","old":"false","new":"true"}]}