CVE-2024-34319: CVE-2024-34319: sunucu taraflı istek sahteciliği (SSRF)

Açıklama (NVD)

A Server-Side Request Forgery (SSRF) in the serviceURL parameter of ProPhoenix Law RMS v2022.2403.3.101 allows attackers to force the application server to make unintended DNS and web requests via a crafted HTTP request.

Özet bilgiler

CVSS v3.1

6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS

%0,27 (yüzdelik 19)

CWE

CWE-918

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• prophoenix.com
• sedriclouissaint.com
• CWE-918