CVE-2024-24028: SSRF
Published Feb 29, 2024
·Updated
Server Side Request Forgery (SSRF) vulnerability in Likeshop before 2.5.7 allows attackers to view sensitive information via the avatar parameter in function UserLogic::updateWechatInfo.
Affected Software
2 affected components
Likeshop Likeshop<2.5.7
Likeshop Likeshop<2.5.7
Event History
Feb 29, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Mar 21, 2024
Data Sourced
via NVD·02:52 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-24028?
CVE-2024-24028 is classified as a high severity Server Side Request Forgery (SSRF) vulnerability.
2
How do I fix CVE-2024-24028?
To mitigate CVE-2024-24028, upgrade Likeshop to version 2.5.7 or later.
3
What impact does CVE-2024-24028 have on systems?
CVE-2024-24028 allows attackers to exploit the avatar parameter to access sensitive information on the server.
4
Which versions of Likeshop are affected by CVE-2024-24028?
CVE-2024-24028 affects all Likeshop versions prior to 2.5.7.
5
What type of vulnerability is CVE-2024-24028?
CVE-2024-24028 is a Server Side Request Forgery (SSRF) vulnerability.