CVE-2024-51408 - CERT CVE

  1. CVE-2024-51408

ID CVE-2024-51408
Sažetak AppSmith Community 1.8.3 before 1.46 allows SSRF via New DataSource for application/json requests to 169.254.169.254 to retrieve AWS metadata credentials.
Reference
CVSS
Base: 8.5
Impact: 6.0
Exploitability:1.8
Pristup
VektorSloženostAutentikacija
NETWORK HIGH LOW
Impact
PovjerljivostCjelovitostDostupnost
HIGH HIGH HIGH
CVSS vektor CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Zadnje važnije ažuriranje 05-11-2024 - 22:35
Objavljeno 04-11-2024 - 14:15