CVE-2024-55089

Rhymix before 2.1.24 is vulnerable to Server-Side Request Forgery SSRF in the background import data function because XML documents may contain external entities...

CVE-2024-55089

creationtimestamp| type| source ---|---|--- 2024-12-18 17:24:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113674988873098622 2024-12-18 19:32:59+00:00| seen| https://t.me/cvedetector/13219 2024-12-25 23:32:00+00:00| published-proof-of-concept|...

CVE-2024-55089

Rhymix before 2.1.24 is vulnerable to Server-Side Request Forgery SSRF in the background import data function because XML documents may contain external entities...

CVE-2024-55089

Rhymix 2.1.19 is vulnerable to Server-Side Request Forgery (SSRF) in the background import data function. The issue’s affected component is Rhymix (CMS/framework), with the root cause being insecure handling of server-side requests during the import process. Reported impact includes potential una...