CVE-2024-39713

A Server-Side Request Forgery SSRF affects Rocket.Chat's Twilio webhook endpoint before version 6.10.1...

CVE-2024-39713

A Server-Side Request Forgery SSRF affects Rocket.Chat's Twilio webhook endpoint before version 6.10.1...

CVE-2024-39713

Summary: CVE-2024-39713 affects Rocket.Chat’s Twilio webhook endpoint and enables Server-Side Request Forgery (SSRF) prior to version 6.10.1. The vulnerability allows an unauthenticated actor to induce the server to make arbitrary outbound requests to internal or external resources. Affected prod...

CVE-2024-36448: Server-Side Request Forgery (SSRF)

UNSUPPORTED WHEN ASSIGNED Server-Side Request Forgery SSRF vulnerability in Apache IoTDB Workbench. This issue affects Apache IoTDB Workbench: from 0.13.0. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restri...

WonderCMS Server-Side Request Forgery Vulnerability

WonderCMS is a PHP-based open source content management system CMS from WonderCMS. A server-side request forgery vulnerability exists in WonderCMS version 3.4.3, which stems from a failure to properly validate user input in the Plugins Page, and can be exploited by an attacker to force the...

CVE-2024-39637

CVE-2024-39637 is a Server-Side Request Forgery (SSRF) vulnerability affecting the WordPress theme Edubin (Pixelcurve) up to version 9.2.0. Public details consistently describe SSRF but do not provide the exact exploit vector or affected configurations beyond “Edubin: from n/a through 9.2.0.” The...

CVE-2024-39637 WordPress Edubin theme <= 9.2.0 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in pixelcurve Edubin edubin.This issue affects Edubin: from n/a through = 9.2.0...

CVE-2024-38746

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in MakeStories Team MakeStories for Google Web Stories allows Path Traversal, Server Side Request Forgery.This issue affects MakeStories for Google Web Stories: from n/a through 3.0.3...

Security Bulletin: IBM Content Navigator is vulnerable to Server Side Request Forgery leading to Arbitrary File Read due to Oracle Outside In Technology (CVE-2023-35896)

Summary Oracle Outside In Technology is used in some configurations of IBM Content Navigator as part of the document viewer. CVE-2023-35896. Vulnerability Details CVEID:CVE-2023-35896 DESCRIPTION: IBM Content Navigator is vulnerable to server-side request forgery SSRF. This may allow an...

CVE-2024-38746

CVE-2024-38746 affects the WordPress MakeStories (for Google Web Stories) plugin: MakeStories (for Google Web Stories) up to version 3.0.3 is affected by a path traversal vulnerability that also enables Server-Side Request Forgery (SSRF), potentially allowing arbitrary file download. The connecte...

CVE-2024-38791 WordPress AI ENGINE plugin <= 2.4.7 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot allows Server Side Request Forgery.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 2.4.7...

CVE-2024-2090

The Remote Content Shortcode plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.5 via the remotecontent shortcode. This makes it possible for authenticated attackers, with contributor-level access and above, to make web requests to arbitrary...

CVE-2024-2090

CVE-2024-2090 — The WordPress plugin Remote Content Shortcode (versions

CVE-2024-2090 Remote Content Shortcode <= 1.5 - Authenticated (Contributor+) Server-Side Request Forgery

The Remote Content Shortcode plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.5 via the remotecontent shortcode. This makes it possible for authenticated attackers, with contributor-level access and above, to make web requests to arbitrary...

CVE-2024-7330

A vulnerability has been found in YouDianCMS 7 and classified as critical. Affected by this vulnerability is the function curlexec of the file /App/Core/Extend/Function/ydLib.php. The manipulation of the argument url leads to server-side request forgery. The attack can be launched remotely. The...

PT-2024-28190

Name of the Vulnerable Software and Affected Versions MakeStories for Google Web Stories versions n/a through 3.0.3 Description The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal', which allows for Path Traversal and Server Side...

CVE-2024-38791: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot allows Server Side Request Forgery.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 2.4.7...

CVE-2024-38746: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in MakeStories Team MakeStories for Google Web Stories allows Path Traversal, Server Side Request Forgery.This issue affects MakeStories for Google Web Stories: from n/a through 3.0.3...

PT-2024-28222 · Openai · Chatgpt Chatbot

Name of the Vulnerable Software and Affected Versions: AI Engine: ChatGPT Chatbot versions n/a through 2.4.7 Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability. This allows for Server Side Request Forgery in the ChatGPT Chatbot. Recommendations: For versions n/a...

CVE-2024-7330 YouDianCMS ydLib.php curl_exec server-side request forgery

A vulnerability has been found in YouDianCMS 7 and classified as critical. Affected by this vulnerability is the function curlexec of the file /App/Core/Extend/Function/ydLib.php. The manipulation of the argument url leads to server-side request forgery. The attack can be launched remotely. The...