CVE-2024-2796 in Community Manager Developer Portal

الملخص

بحسب MITRE • 18/04/2024

A server-side request forgery (SSRF) was discovered in the Akana Community Manager Developer Portal in versions prior to and including 2022.1.3. Reported by Jakob Antonsson.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• مسؤول: Perforce
• حجز: 21/03/2024
• إفشاء: 18/04/2024
• الاعتدال: تمت الموافقة
• إدخال: VDB-261521
• CPE: جاهز
• CWE: CWE-918 (مؤكد)
• CVSS: 9.3 (CNA)
• EPSS: 0.00378
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-2796
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-2796
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-2796/