CVE-2024-51242: SSRF
A Server-Side Request Forgery (SSRF) vulnerability has been identified in eladmin 2.7 and earlier in ServerDeployController.java. The manipulation of the HTTP Body ip parameter leads to SSRF.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-51242?
CVE-2024-51242 is classified as a critical vulnerability due to its potential for exploitation via Server-Side Request Forgery.
How do I fix CVE-2024-51242?
To fix CVE-2024-51242, you should update eladmin to version 2.8 or later, which addresses the SSRF vulnerability.
What software versions are affected by CVE-2024-51242?
CVE-2024-51242 affects eladmin versions 2.7 and earlier.
What are the implications of exploiting CVE-2024-51242?
Exploitation of CVE-2024-51242 can allow attackers to conduct unauthorized requests on behalf of the server, potentially exposing sensitive data.
Is CVE-2024-51242 related to any other vulnerabilities?
CVE-2024-51242 is specifically a Server-Side Request Forgery vulnerability, which may have similarities to other SSRF vulnerabilities in different software.