CVE-2024-37818

Strapi v4.24.4 is vulnerable to a Server-Side Request Forgery (SSRF) due to improper URL parameter validation within the /strapi.io/_next/image component. An attacker could exploit this by sending a crafted GET request to scan for open ports or access sensitive internal information. While the Str...