CVE-2024-52588 in Strapi

Riassunto

di MITRE • 29/05/2025

Strapi is an open-source content management system. Prior to version 4.25.2, inputting a local domain into the Webhooks URL field leads to the application fetching itself, resulting in a server side request forgery (SSRF). This issue has been patched in version 4.25.2.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsabile: GitHub M
• Prenotare: 14/11/2024
• Divulgazione: 29/05/2025
• Moderazione: accettato
• Voce: VDB-310502
• CPE: pronto
• CWE: CWE-918 (confermato)
• CVSS: 7.5 (NVD)
• EPSS: 0.00483
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-52588
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-52588
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-52588/