1. Home
  2. CVE Database
  3. CVE-2024-51242
MEDIUM · 6.5

CVE-2024-51242

A Server-Side Request Forgery (SSRF) vulnerability has been identified in eladmin 2.7 and earlier in ServerDeployController.java. The manipulation of the HTTP Body ip parameter leads to SSRF.

Vulnerability Description

A Server-Side Request Forgery (SSRF) vulnerability has been identified in eladmin 2.7 and earlier in ServerDeployController.java. The manipulation of the HTTP Body ip parameter leads to SSRF.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
EladminEladmin<= 2.7

Related Weaknesses (CWE)

CWE-918

References

FAQ

What is CVE-2024-51242?

CVE-2024-51242 is a vulnerability with a CVSS score of 6.5 (MEDIUM). A Server-Side Request Forgery (SSRF) vulnerability has been identified in eladmin 2.7 and earlier in ServerDeployController.java. The manipulation of the HTTP Body ip parameter leads to SSRF.

How severe is CVE-2024-51242?

CVE-2024-51242 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-51242?

Check the references section above for vendor advisories and patch information. Affected products include: Eladmin Eladmin.