Lucene search

K
nvd[email protected]NVD:CVE-2024-25915
HistoryFeb 23, 2024 - 12:15 p.m.

CVE-2024-25915

2024-02-2312:15:46
CWE-918
web.nvd.nist.gov
5
cve-2024-25915
pexels
ssrf
raaj trambadia
free stock photos

CVSS3

4.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N

AI Score

5.2

Confidence

High

EPSS

0

Percentile

9.0%

Server-Side Request Forgery (SSRF) vulnerability in Raaj Trambadia Pexels: Free Stock Photos.This issue affects Pexels: Free Stock Photos: from n/a through 1.2.2.

CVSS3

4.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N

AI Score

5.2

Confidence

High

EPSS

0

Percentile

9.0%