CVE-2024-55089

Rhymix before 2.1.24 is vulnerable to Server-Side Request Forgery SSRF in the background import data function because XML documents may contain external entities...

CVE-2024-55089

creationtimestamp| type| source ---|---|--- 2024-12-18 17:24:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113674988873098622 2024-12-18 19:32:59+00:00| seen| https://t.me/cvedetector/13219 2024-12-25 23:32:00+00:00| published-proof-of-concept|...

CVE-2024-55089

Rhymix before 2.1.24 is vulnerable to Server-Side Request Forgery SSRF in the background import data function because XML documents may contain external entities...

CVE-2024-55089

Rhymix, an open source CMS and framework , is vulnerable to Server-Side Request Forgery (SSRF) in versions prior to 2.1.24 . The root cause is the background import data function , which fails to properly handle XML documents containing external entities . An attacker could potentially forge requ...