CVE-2024-22217

medium

Description

A Server-Side Request Forgery (SSRF) vulnerability in Terminalfour before 8.3.19 allows authenticated users to use specific features to access internal services including sensitive information on the server that Terminalfour runs on.

References

https://docs.terminalfour.com/release-notes/security-notices/cve-2024-22217/

https://docs.terminalfour.com/articles/release-notes-highlights/

Details

Source: Mitre, NVD

Published: 2024-08-15

Updated: 2025-03-24

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 6.5

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N