Lucene search
Veracode Vulnerability DatabaseVERACODE:47175HistoryMay 27, 2024 - 3:34 a.m.
Server-Side Request Forgery (SSRF)
2024-05-2703:34:43
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
1
vufind
ssrf
vulnerability
config files
remote attackers
route
vufind/vufind is vulnerable to Server-Side Request Forgery (SSRF). The vulnerability is due to the /Upgrade/FixConfig route, which allows remote attackers to overwrite local configuration files.
| CPE | Name | Operator | Version |
|---|---|---|---|
| vufind/vufind | le | v9.1 | |
| vufind/vufind | le | v9.1 |
Related
github
github
VuFind Server-Side Request Forgery (SSRF) vulnerability
2024-05-22 21:30:35
osv
osv
VuFind Server-Side Request Forgery (SSRF) vulnerability
2024-05-22 21:30:35
cve
cve
CVE-2024-25738
2024-05-22 19:15:08
nvd
nvd
CVE-2024-25738
2024-05-22 19:15:08
cvelist
cvelist
CVE-2024-25738
1976-01-01 00:00:00