PT-2024-32002 · Jpress · Jpress

Ilikeoyto · Published 2024-10-11 · Updated 2024-10-15 · CVE-2024-46468

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions jpress versions prior to 5.1.1

Description A Server-Side Request Forgery (SSRF) issue exists, which can be exploited by an attacker to obtain sensitive information, resulting in an information disclosure.

Recommendations For versions prior to 5.1.1, update to version 5.1.1 or later to resolve the issue.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2024-46468

Affected Products

Jpress

References · 5

• https://github.com/JPressProjects/jpress/issues/190 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-46468 · Security Note
• https://osv.dev/vulnerability/CVE-2024-46468 · Vendor Advisory
• https://t.me/cvedetector/7746 · Telegram Post
• https://gist.github.com/ilikeoyt/b396bbb9ef858105c46e999630e7afbe · Note