CVE-2024-57252

creationtimestamp| type| source ---|---|--- 2025-01-17 21:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfxpon2say2f 2025-01-17 22:39:15+00:00| seen| https://t.me/cvedetector/15745 2025-01-17 22:39:45+00:00| seen|...

CVE-2024-57252

OtCMS version 7.46 and prior is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability located in the /admin/read.php API endpoint. This flaw allows an attacker to read system files arbitrarily . As a temporary workaround, it is recommended to restrict access to the "/admin/read.php" en...