CVE-2024-29319 - Volmarg Personal Management System 1.4.64 is vulnerable to SSRF (Server Side Request Forgery) via uploading a SVG file

Back Back to CVE browser

CRITICAL

Volmarg Personal Management System 1.4.64 is vulnerable to SSRF (Server Side Request Forgery) via uploading a SVG file

Published Jul 5, 2024

9.8

CRITICAL

CVSS 3.1

EPSS 0.39%

Description

Volmarg Personal Management System 1.4.64 is vulnerable to SSRF (Server Side Request Forgery) via uploading a SVG file. The server can make unintended HTTP and DNS requests to a server that the attacker controls.

Affected products

Vendor Volmarg Product Personal Management System Default
unknown
Affected
- 1.4.64

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Volmarg	Personal Management System	unknown	Affected 1.4.64

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-918

SSRF

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-26330		Advisory
https://github.com/b-hermes/vulnerability-research/tree/main/CVE-2024-29319		Exploit

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jul 5, 2024

Updated Aug 2, 2024

Reserved Mar 19, 2024

Link CVE-2024-29319

CISA Vulnrichment

Updated Jul 8, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2024-29319

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Jul 5, 2024

Updated Aug 2, 2024

Link EUVD-2024-26330

GitHub

No data