CVE-2024-22217

CVSS 6.5 MEDIUMEPSS 0.3%CWE-918

Vexday Risk Score

13Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 6.5EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

15 ago 2024Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A Server-Side Request Forgery (SSRF) vulnerability in Terminalfour before 8.3.19 allows authenticated users to use specific features to access internal services including sensitive information on the server that Terminalfour runs on.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Productos afectados

n/a · n/a

Referencias

https://docs.terminalfour.com/articles/release-notes-highlights/https://docs.terminalfour.com/release-notes/security-notices/cve-2024-22217/