Lucene search

CVE-2024-52598 2FAuth vulnerable to Server Side Request Forgery + URI validation bypass in 2fauth /api/v1/twofaccounts/preview

🗓️ 20 Nov 2024 14:45:09Reported by GitHub_MType

Two interconnected vulnerabilities in 2FAuth version 5.4.1 enable SSRF and URI validation bypass, allowing retrieval of arbitrary URIs and potential server-side request forgery

Reporter	Title	Published	Views	Family All 3
NVD	CVE-2024-52598	20 Nov 202415:15	–	nvd
Vulnrichment	CVE-2024-52598 2FAuth vulnerable to Server Side Request Forgery + URI validation bypass in 2fauth /api/v1/twofaccounts/preview	20 Nov 202414:09	–	vulnrichment
CVE	CVE-2024-52598	20 Nov 202415:15	–	cve

[
  {
    "vendor": "Bubka",
    "product": "2FAuth",
    "versions": [
      {
        "version": "< 5.4.1",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/Bubka/2FAuth/security/advisories/GHSA-xwxc-w7v3-2p4j

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

20 Nov 2024 14:09Current

CVSS37.5

EPSS0.000

2fauth vulnerabilities ssrf uri validation bypass version 5.4.1