Vulners
Lucene search
| Reporter | Title | Published | Views | Family All 9 |
|---|---|---|---|---|
 | CVE-2024-52598 | 20 Nov 202414:20 | – | circl |
 | 2FAuth 安全漏洞 | 20 Nov 202400:00 | – | cnnvd |
 | CVE-2024-52598 2FAuth vulnerable to Server Side Request Forgery + URI validation bypass in 2fauth /api/v1/twofaccounts/preview | 20 Nov 202414:09 | – | cvelist |
 | EUVD-2024-46026 | 3 Oct 202520:07 | – | euvd |
 | CVE-2024-52598 | 20 Nov 202415:15 | – | nvd |
 | CVE-2024-52598 2FAuth vulnerable to Server Side Request Forgery + URI validation bypass in 2fauth /api/v1/twofaccounts/preview | 20 Nov 202414:09 | – | osv |
 | PT-2024-35394 · 2Fauth · 2Fauth | 20 Nov 202400:00 | – | ptsecurity |
 | CVE-2024-52598 | 5 Feb 202512:19 | – | redhatcve |
 | CVE-2024-52598 2FAuth vulnerable to Server Side Request Forgery + URI validation bypass in 2fauth /api/v1/twofaccounts/preview | 20 Nov 202414:09 | – | vulnrichment |
[
{
"vendor": "Bubka",
"product": "2FAuth",
"versions": [
{
"version": "< 5.4.1",
"status": "affected"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| uri | request body | api/v1/twofaccounts/preview | SSRF in POST /api/v1/twofaccounts/preview allowing server-side fetch of an arbitrary URI and bypass of image-extension validation using #.svg in the URI. | CWE-918, CWE-79, CWE-80 |
| remote_uri | request body | api/v1/twofaccounts/preview | SSRF in POST /api/v1/twofaccounts/preview allowing server-side fetch of an arbitrary URI and bypass of image-extension validation using #.svg in the URI. | CWE-918, CWE-79, CWE-80 |
| image_url | request body | api/v1/twofaccounts/preview | SSRF in POST /api/v1/twofaccounts/preview allowing server-side fetch of an arbitrary URI and bypass of image-extension validation using #.svg in the URI. | CWE-918, CWE-79, CWE-80 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
04 Aug 2025 15:24Current
7.8High risk
Vulners AI Score7.8
CVSS 3.17.5
EPSS0.00165
SSVC