Lucene search
+L

5 matches found

NVD
NVD
•added 2024/03/21 2:52 a.m.•24 views

CVE-2024-24028

Server Side Request Forgery SSRF vulnerability in Likeshop before 2.5.7 allows attackers to view sensitive information via the avatar parameter in function UserLogic::updateWechatInfo...

5.9CVSS6.2AI score0.00217EPSS
SaveExploits0References1
CVE
CVE
•added 2024/02/29 12:00 a.m.•47 views

CVE-2024-24028

A Server Side Request Forgery (SSRF) vulnerability exists in Likeshop versions prior to 2.5.7 . The flaw is located in the UserLogic::updateWechatInfo function and is triggered via the avatar parameter. This vulnerability allows an attacker to view sensitive information . To remediate this issue,...

6.4AI score0.00217EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/02/29 12:00 a.m.•16 views

CVE-2024-24028

Server Side Request Forgery SSRF vulnerability in Likeshop before 2.5.7 allows attackers to view sensitive information via the avatar parameter in function UserLogic::updateWechatInfo...

6.5AI score0.00217EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/29 12:00 a.m.•2 views

CVE-2024-24028: Server-Side Request Forgery (SSRF)

Server Side Request Forgery SSRF vulnerability in Likeshop before 2.5.7 allows attackers to view sensitive information via the avatar parameter in function UserLogic::updateWechatInfo...

5.9CVSS5.9AI score0.00217EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/02/29 12:00 a.m.•28 views

CVE-2024-24028

Server Side Request Forgery SSRF vulnerability in Likeshop before 2.5.7 allows attackers to view sensitive information via the avatar parameter in function UserLogic::updateWechatInfo...

6.4AI score0.00217EPSS
SaveExploits0References1
Rows per page
Query Builder