CVE-2024-48232 - An issue was found in mipjz 5.0.5

Back Back to CVE browser

MEDIUM

An issue was found in mipjz 5.0.5

Published Oct 25, 2024

4.9

MEDIUM

CVSS 3.1

EPSS 0.50%

Description

An issue was found in mipjz 5.0.5. In the mipPost method of \app\setting\controller\ApiAdminTool.php, the value of the postAddress parameter is not processed and is directly passed into curl_exec execution and output, resulting in a Server-side request forgery (SSRF) vulnerability that can read server files.

Affected products

Vendor Mipjz Project Product Mipjz Default
n/a
- Version
  5.0.5
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Mipjz Project

Mipjz

n/a

Version	Status	Constraints
5.0.5	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-918

SSRF

References (1)

https://github.com/sansanyun/mipjz/issues/17
ExploitIssue Tracking

Link	Providers	Tags
https://github.com/sansanyun/mipjz/issues/17		ExploitIssue Tracking

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Oct 25, 2024

Updated Oct 30, 2024

Reserved Oct 8, 2024

Link CVE-2024-48232

CISA Vulnrichment

Updated Oct 30, 2024

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2024-48232

Red Hat

Severity n/a

Public date n/a

Links CVE-2024-48232