CVE-2024-51242

A Server-Side Request Forgery (SSRF) vulnerability has been identified in eladmin 2.7 and earlier in ServerDeployController.java. The manipulation of the HTTP Body ip parameter leads to SSRF.

Score

CVSS 3.1 6.5 Medium

Status

Analyzed - cve@mitre.org

Published

2024-10-30

Last modified

2024-10-31

Weaknesses

CWE-918

Affected products

• Eladmin (Eladmin)

References

• https://github.com/shadia0/Patienc/blob/main/eladmin_ssrf.md