Lucene search

K
cvelistMitreCVELIST:CVE-2024-37818
HistoryJun 20, 2024 - 12:00 a.m.

CVE-2024-37818

2024-06-2000:00:00
mitre
www.cve.org
strapi
v4.24.4
ssrf
vulnerability
/strapi.io/_next/image
get request

0.0004 Low

EPSS

Percentile

9.1%

Strapi v4.24.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /strapi.io/_next/image. This vulnerability allows attackers to scan for open ports or access sensitive information via a crafted GET request.

0.0004 Low

EPSS

Percentile

9.1%

Related for CVELIST:CVE-2024-37818