CVE-2024-44677: SSRF
eladmin v2.7 and before is vulnerable to Server-Side Request Forgery (SSRF) which allows an attacker to execute arbitrary code via the DatabaseController.java component.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-44677?
CVE-2024-44677 has a high severity rating due to its potential for Server-Side Request Forgery leading to arbitrary code execution.
How do I fix CVE-2024-44677?
To fix CVE-2024-44677, upgrade Eladmin to version 2.8 or later where the vulnerability has been patched.
What does CVE-2024-44677 affect?
CVE-2024-44677 affects Eladmin version 2.7 and earlier, specifically targeting the DatabaseController.java component.
What kind of attack is CVE-2024-44677 associated with?
CVE-2024-44677 is associated with Server-Side Request Forgery (SSRF), allowing attackers to make unauthorized requests.
Is CVE-2024-44677 easy to exploit?
Exploiting CVE-2024-44677 can potentially be easy for attackers with knowledge of the affected system's configurations.