CVE-2024-51242

Description

A Server-Side Request Forgery (SSRF) vulnerability has been identified in eladmin 2.7 and earlier in ServerDeployController.java. The manipulation of the HTTP Body ip parameter leads to SSRF.

References

https://github.com/shadia0/Patienc/blob/main/eladmin_ssrf.md

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-45305

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS