CVE-2024-39954

Apache EventMesh is vulnerable to a Server-Side Request Forgery (SSRF) (CWE-918) in the eventmesh-runtime module, specifically within the WebhookUtil.java file. This flaw affects systems running on Windows, Linux, and macOS . An attacker can exploit this vulnerability to abuse server functionalit...