CVE-2024-51242 - A Server-Side Request Forgery (SSRF) vulnerability has been identified in eladmin 2.7 and earlier in ServerDeployController.java

Back Back to CVE browser

MEDIUM

A Server-Side Request Forgery (SSRF) vulnerability has been identified in eladmin 2.7 and earlier in ServerDeployController.java

Published Oct 30, 2024

6.5

MEDIUM

CVSS 3.1

EPSS 0.43%

Description

A Server-Side Request Forgery (SSRF) vulnerability has been identified in eladmin 2.7 and earlier in ServerDeployController.java. The manipulation of the HTTP Body ip parameter leads to SSRF.

Affected products

Vendor Eladmin Product Eladmin Default
n/a
- Version
  2.7
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Eladmin

n/a

Version	Status	Constraints
2.7	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-918

SSRF

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-45305
Advisory
https://github.com/shadia0/Patienc/blob/main/eladmin_ssrf.md
ExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-45305		Advisory
https://github.com/shadia0/Patienc/blob/main/eladmin_ssrf.md		ExploitThird Party Advisory