Lucene search

K
nvd[email protected]NVD:CVE-2024-37818
HistoryJun 20, 2024 - 7:15 p.m.

CVE-2024-37818

2024-06-2019:15:50
web.nvd.nist.gov
3
strapi v4.24.4
ssrf vulnerability
server-side request forgery
port scanning
sensitive information access

0.0004 Low

EPSS

Percentile

9.1%

Strapi v4.24.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /strapi.io/_next/image. This vulnerability allows attackers to scan for open ports or access sensitive information via a crafted GET request.

0.0004 Low

EPSS

Percentile

9.1%

Related for NVD:CVE-2024-37818