CVE-2024-4219

critical

Description

Prior to 23.2, it is possible to perform arbitrary Server-Side requests via HTTP-based connectors within BeyondInsight, resulting in a server-side request forgery vulnerability.

References

https://www.beyondtrust.com/trust-center/security-advisories/BT24-05

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-32771

Details

Source: Mitre, NVD

Published: 2024-06-04

Updated: 2024-06-11

Risk Information

CVSS v2

Base Score: 9.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:N

Severity: High

CVSS v3

Base Score: 9.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Severity: Critical

EPSS

EPSS: 0.00216

Detections

Analytics