Lucene search

K
cve[email protected]CVE-2024-5736
HistoryJun 28, 2024 - 12:15 p.m.

CVE-2024-5736

2024-06-2812:15:10
CWE-918
web.nvd.nist.gov
11
cve-2024-5736
ssrf
admirorframes

8.2 High

CVSS4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/SC:N/VI:N/SI:N/VA:N/SA:N/AU:Y/U:Green/R:U/V:D/RE:L

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.5%

Server Side Request Forgery (SSRF) vulnerability in AdmirorFrames Joomla! extension in afGdStream.php script allows to access local files or server pages available only from localhost.Β This issue affects AdmirorFrames: before 5.0.

CNA Affected

[
  {
    "collectionURL": "https://www.admiror-design-studio.com/admiror-joomla-extensions/admiror-frames",
    "defaultStatus": "unaffected",
    "platforms": [
      "Joomla!"
    ],
    "product": "AdmirorFrames",
    "repo": "https://github.com/vasiljevski/admirorframes",
    "vendor": "Nikola Vasilijevski",
    "versions": [
      {
        "lessThan": "5.0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

8.2 High

CVSS4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/SC:N/VI:N/SI:N/VA:N/SA:N/AU:Y/U:Green/R:U/V:D/RE:L

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.5%

Related for CVE-2024-5736