PT-2024-27764 · Strapi · Strapi

Name of the Vulnerable Software and Affected Versions: Strapi version 4.24.4 Description: The issue allows attackers to scan for open ports or access sensitive information via a crafted GET request to the "/strapi.io/ next/image" component. This is a Server-Side Request Forgery SSRF vulnerability...