by Kastro
Paper/Archive/CVE-2024-0649

CVE-2024-0649

VulDB — ZhiHuiYun Search ImageController.php download_network_image server-side request forgery

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
38
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 42.4.424 × 208.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A vulnerability was found in ZhiHuiYun up to 4.4.13 and classified as critical. This issue affects the function download_network_image of the file /app/Http/Controllers/ImageController.php of the component Search. The manipulation of the argument url leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-251375.

Affected

ProductAffectedFixed inSource
ZhiHuiYun4.4.0–CNA
ZhiHuiYun4.4.1–CNA
ZhiHuiYun4.4.2–CNA
ZhiHuiYun4.4.3–CNA
ZhiHuiYun4.4.4–CNA
ZhiHuiYun4.4.5–CNA
ZhiHuiYun4.4.6–CNA
ZhiHuiYun4.4.7–CNA
ZhiHuiYun4.4.8–CNA
ZhiHuiYun4.4.9–CNA
ZhiHuiYun4.4.10–CNA
ZhiHuiYun4.4.11–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
VulDB (CNA)6.3CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
VulDB (CNA)6.3CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

writeupvuldb.com/?id.251375refvuldb.com/?ctiid.251375exploitnote.zhaoj.in/share/jC6NMe5TRSys