CVE-2024-50811

Published: 2024-11-08T19:15Z

Last Modified: 2024-11-21T17:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

hopetree izone lts c011b48 contains a server-side request forgery (SSRF) vulnerability in the active push function as \\apps\\tool\\apis\\bd_push.py does not securely filter user input through push_urls() and get_urls(). > MITRE Terms of Use apply – see LICENSE‑MITRE.txt