PT-2024-19593 · Tencent · Tencent Blueking Cmdb

Exp1Orer · Published 2024-02-26 · Updated 2025-06-09 · CVE-2024-22873

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Tencent Blueking CMDB versions 3.2.x through 3.9.x

Description The issue is related to a Server-Side Request Forgery (SSRF) that affects the event subscription function. This allows attackers to access internal requests via a crafted POST request to the "/service/subscription.go" endpoint. The event subscription function is the vulnerable component, and the exploitation involves sending a crafted POST request.

Recommendations For versions 3.2.x through 3.9.x, consider disabling the event subscription function until a patch is available. Restrict access to the "/service/subscription.go" endpoint to minimize the risk of exploitation. Avoid using the event subscription function in the affected API endpoint until the issue is resolved.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2024-22873

Affected Products

Tencent Blueking Cmdb

References · 9

• 🔥 https://sphenoid-enquiry-9be.notion.site/BK-CMDB-SSRF-ba21e94f4976460188fa52d26c15a6ae?pvs=4 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-22873 · Security Note
• https://osv.dev/vulnerability/CVE-2024-22873 · Vendor Advisory
• https://t.me/cvenotify/125117 · Telegram Post
• https://twitter.com/CVEnew/status/1762150245985640681 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1762176827630461386 · Twitter Post
• https://gist.github.com/exp1orer/0f190c6a64b668a9b1c4c47789affa09 · Note
• http://tencent.com · Note
• http://blueking.com · Note