CVE-2024-37818

Strapi v4.24.4 is affected by a Server-Side Request Forgery (SSRF) through the /strapi.io/_next/image endpoint. The issue allows an attacker to scan internal ports or access sensitive information via a crafted GET request. Root cause cited across sources as improper URL parameter handling in the ...