CVE-2024-29319: SSRF

Published Jul 5, 2024

Updated

Volmarg Personal Management System 1.4.64 is vulnerable to SSRF (Server Side Request Forgery) via uploading a SVG file. The server can make unintended HTTP and DNS requests to a server that the attacker controls.

Affected Software

1 affected component

personal-management-system Personal Management System=1.4.64

Event History

Jul 5, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·04:15 PM

Description

Frequently Asked Questions

What is the severity of CVE-2024-29319?

CVE-2024-29319 is classified as a high severity vulnerability due to the potential for SSRF attacks.

How do I fix CVE-2024-29319?

To mitigate CVE-2024-29319, ensure that the server validates and sanitizes all file uploads, especially SVG files.

What systems are affected by CVE-2024-29319?

CVE-2024-29319 affects Volmarg Personal Management System version 1.4.64.

What kind of attacks can CVE-2024-29319 facilitate?

CVE-2024-29319 can facilitate Server Side Request Forgery (SSRF) attacks, allowing attackers to send requests to internal or external systems.

Is CVE-2024-29319 exploitable remotely?

Yes, CVE-2024-29319 is exploitable remotely, allowing unauthorized users to perform SSRF attacks through file uploads.