← Back to CVE List

CVE-2024-48346

Published: 2024-10-30T21:15Z
Last Modified: 2024-11-01T12:57Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
xtreme1 <= v0.9.1 contains a Server-Side Request Forgery (SSRF) vulnerability in the /api/data/upload path. The vulnerability is triggered through the fileUrl parameter, which allows an attacker to make arbitrary requests to internal or external systems. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt