CVE-2024-48360

CVE-2024-48360 | Qualitor = v8.24 未认证的SSRF CVE-2024-48360 | Qualitor = v8.24 未认证的SSRF 描述 Qualitor 是一个业务流程管理平台，该系统存在于巴西的多个公司中，只需使用 Google dorking 即可识别。 我们的团队在应用程序中发现了一个易受 SSRF 攻击的漏洞，该漏洞允许枚举内部系统/端口。 概念验证 POC 发现 Qualitor v8.24 包含一个通过组件 /request/viewValidacao.php 产生的服务器端请求伪造 SSRF 漏洞。 要利用该漏洞，只需向...

CVE-2024-48360

Qualitor v8.24 was discovered to contain a Server-Side Request Forgery SSRF via the component /request/viewValidacao.php...

CVE-2024-48360: Server-Side Request Forgery (SSRF)

Qualitor v8.24 was discovered to contain a Server-Side Request Forgery SSRF via the component /request/viewValidacao.php...

CVE-2024-48360

Qualitor v8.24 was discovered to contain a Server-Side Request Forgery SSRF via the component /request/viewValidacao.php...

CVE-2024-48360

Qualitor v8.24 was discovered to contain a Server-Side Request Forgery SSRF via the component /request/viewValidacao.php...

Exploit for Server-Side Request Forgery in Qualitor

CVE-2024-48360 | Qualitor = v8.24 Unauthenticated SSRF CVE-20...