Vulnerabilities (CVE)

Filtered by vendor Tencent Subscribe
Filtered by product Blueking Cmdb
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-22873 1 Tencent 1 Blueking Cmdb 2025-04-25 N/A 8.1 HIGH
Tencent Blueking CMDB v3.2.x to v3.9.x was discovered to contain a Server-Side Request Forgery (SSRF) via the event subscription function (/service/subscription.go). This vulnerability allows attackers to access internal requests via a crafted POST request.