CVE-2024-54819

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-54819
I, Librarian before and including 5.11.1 is vulnerable to Server-Side Request Forgery (SSRF) due to improper input validation in classes/security/validation.php

9.1 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://github.com/mkucej/i-librarian-free/commit/ed36f6f258392fa2ec72f9820661ded75d91accc
https://github.com/partywavesec/CVE-2024-55557
Configurations

No configuration.

History

08 Jan 2025, 15:15

Type Values Removed Values Added
CWE CWE-918
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.1
Summary
  • (es) I, Librarian antes y después de la versión 5.11.1 incluida es vulnerable a Server-Side Request Forgery (SSRF) debido a una validación de entrada incorrecta en classes/security/validation.php

07 Jan 2025, 20:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-01-07 20:15

Updated : 2025-01-08 15:15

NVD link : CVE-2024-54819

Mitre link : CVE-2024-54819

CVE.ORG link : CVE-2024-54819

JSON object : View

Products Affected

No product.

CWE
CWE-918

Server-Side Request Forgery (SSRF)