Lucene search
+L

4 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/20 12:00 a.m.•8 views

CVE-2024-37818: Server-Side Request Forgery (SSRF)

Strapi v4.24.4 was discovered to contain a Server-Side Request Forgery SSRF via the component /strapi.io/next/image. This vulnerability allows attackers to scan for open ports or access sensitive information via a crafted GET request. NOTE: The Strapi Development Community argues that this issue ...

8.6CVSS7.7AI score0.00556EPSS
SaveExploits1References1
Mend
Mend
•added 2024/06/20 12:00 a.m.•8 views

CVE-2024-37818

Strapi v4.24.4 was discovered to contain a Server-Side Request Forgery SSRF via the component /strapi.io/next/image. This vulnerability allows attackers to scan for open ports or access sensitive information via a crafted GET request. NOTE: The Strapi Development Community argues that this issue ...

9.2CVSS0.00556EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2024/06/20 12:00 a.m.•15 views

CVE-2024-37818

Strapi v4.24.4 was discovered to contain a Server-Side Request Forgery SSRF via the component /strapi.io/next/image. This vulnerability allows attackers to scan for open ports or access sensitive information via a crafted GET request. NOTE: The Strapi Development Community argues that this issue ...

8.4AI score0.00556EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/06/20 12:00 a.m.•46 views

CVE-2024-37818

Strapi v4.24.4 was discovered to contain a Server-Side Request Forgery SSRF via the component /strapi.io/next/image. This vulnerability allows attackers to scan for open ports or access sensitive information via a crafted GET request. NOTE: The Strapi Development Community argues that this issue ...

0.00556EPSS
SaveExploits1References2
Rows per page
Query Builder