CVE-2024-50714

A Server-Side Request Forgery SSRF in smarts-srl.com Smart Agent v.1.1.0 allows a remote attacker to obtain sensitive information via a crafted script to the /FB/getFbVideoSource.php component...

CVE-2024-50714

creationtimestamp| type| source ---|---|--- 2024-12-27 21:18:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113726869374317780 2024-12-27 22:15:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3leczagqme525 2024-12-28 00:23:23+00:00| seen|...

CVE-2024-50714

This CVE describes a Server-Side Request Forgery (SSRF) in Smarts Smart Agent v1.1.0. A crafted script targeting /FB/getFbVideoSource.php can cause the agent to disclose sensitive information. Impact is indicated as high (CVE score 7.5) with network access and no user interaction. Red Hat and CVE...