12051 matches found
CVE-2024-55082
A Server-Side Request Forgery SSRF in the endpoint http://your-server/url-to-pdf of Stirling-PDF 0.35.1 allows attackers to access sensitive information via a crafted request...
CVE-2024-55082
A Server-Side Request Forgery SSRF in the endpoint http://your-server/url-to-pdf of Stirling-PDF 0.35.1 allows attackers to access sensitive information via a crafted request...
CVE-2024-55082
Stirling-PDF version 0.35.1 is vulnerable to a Server-Side Request Forgery (SSRF) in the http://{your-server}/url-to-pdf endpoint. A crafted request can allow an attacker to access sensitive information and obtain confidential data. As a temporary workaround, users are advised to restrict access ...
QOS.CH logback-core Server-Side Request Forgery vulnerability
Server-Side Request Forgery SSRF in SaxEventRecorder by QOS.CH logback version 1.5.12 on the Java platform, allows an attacker to forge requests by compromising logback configuration files in XML. The attacks involves the modification of DOCTYPE declaration in XML configuration files...
CVE-2024-52579 Server-Side Request Forgery vulnerability in various APIs in Misskey
Misskey is an open source, federated social media platform. Some APIs using HttpRequestService do not properly check the target host. This vulnerability allows an attacker to send POST or GET requests to the internal server, which may result in a SSRF attack.It allows an attacker to send POST or...
CVE-2024-52579
Summary: CVE-2024-52579 in Misskey pertains to a Server-Side Request Forgery (SSRF) due to improper host checking in APIs using HttpRequestService. The vulnerability allows an attacker to make POST or GET requests to internal/private IPs, enabling attacks on internal servers. Affected versions: M...
CVE-2024-55089
Rhymix before 2.1.24 is vulnerable to Server-Side Request Forgery SSRF in the background import data function because XML documents may contain external entities...
CVE-2024-55088
GetSimple CMS CE 3.3.19 is vulnerable to Server-Side Request Forgery SSRF in the backend plugin module...
CVE-2024-55086
In the GetSimple CMS CE 3.3.19 management page, Server-Side Request Forgery SSRF can be achieved in the plug-in download address in the backend management system...
XML External Entity
org.http4k, http4k-format-xml is vulnerable to XML External Entity XXE Injection. The vulnerability is due to improper handling of malicious XML content in requests, which could allow attackers to access sensitive local information, perform Server-side Request Forgery SSRF, or potentially execute...
CVE-2024-55088
GetSimple CMS CE 3.3.19 is vulnerable to Server-Side Request Forgery SSRF in the backend plugin module...
PT-2024-36476
Name of the Vulnerable Software and Affected Versions Rhymix version 2.1.19 Description The issue is related to Server-Side Request Forgery SSRF in the background import data function. This means that an attacker could potentially forge requests from the server, leading to unauthorized access to...
CVE-2024-55086
The GetSimple CMS CE version 3.3.19 contains a Server-Side Request Forgery (SSRF) vulnerability within the plug-in download address in the backend management system. This flaw allows an attacker to trigger unauthorized server-side requests. As a temporary workaround, it is recommended to restrict...
CVE-2024-55089
Rhymix, an open source CMS and framework , is vulnerable to Server-Side Request Forgery (SSRF) in versions prior to 2.1.24 . The root cause is the background import data function , which fails to properly handle XML documents containing external entities . An attacker could potentially forge requ...
CVE-2024-55089
Rhymix before 2.1.24 is vulnerable to Server-Side Request Forgery SSRF in the background import data function because XML documents may contain external entities...
CVE-2024-55089
Rhymix before 2.1.24 is vulnerable to Server-Side Request Forgery SSRF in the background import data function because XML documents may contain external entities...
CVE-2024-55088
GetSimple CMS CE version 3.3.19 is vulnerable to Server-Side Request Forgery (SSRF) within its backend plugin module . This flaw allows an attacker to forge requests originating from the server, which could lead to unauthorized access or actions. No specific exploit details or in-the-wild exploit...
CVE-2024-55086
In the GetSimple CMS CE 3.3.19 management page, Server-Side Request Forgery SSRF can be achieved in the plug-in download address in the backend management system...