2 matches found
CVE-2024-25737
A Server-Side Request Forgery SSRF vulnerability in the /Cover/Show route showAction in CoverController.php in Open Library Foundation VuFind 2.4 through 9.1 before 9.1.1 allows remote attackers to access internal HTTP servers and perform Cross-Site Scripting XSS attacks by proxying arbitrary URL...
5.4CVSS6.1AI score0.0045EPSS
SaveExploits0References3
CVE-2024-25737: Improper Neutralization of Input During Web Page Generation
A Server-Side Request Forgery SSRF vulnerability in the /Cover/Show route showAction in CoverController.php in Open Library Foundation VuFind 2.4 through 9.1 before 9.1.1 allows remote attackers to access internal HTTP servers and perform Cross-Site Scripting XSS attacks by proxying arbitrary URL...
5.4CVSS6AI score0.0045EPSS
SaveExploits0References1
20