Skip to main content

Server-Side Request Forgery (SSRF)

CVE-2024-10524

Medium
6.5/10

Summary

Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host.

  • HIGH
  • NETWORK
  • LOW
  • CHANGED
  • NONE
  • NONE
  • LOW
  • LOW

CWE-918 - Server-Side Request Forgery (SSRF)

Server-side request forgery (SSRF) is a weakness that allows an attacker to send an arbitrary request, making it appear that the request was sent by the server. This request may bypass a firewall that would normally prevent direct access to the URL. The impact of this vulnerability can vary from unauthorized access to files and sensitive information to remote code execution.

References

Advisory Timeline

  • Published