Unrated

Server Side Request Forgery (SSRF) vulnerability in Likeshop before 2.5.7 allows attackers to view sensitive information via the avatar parameter in f...

CVE-2024-24028 First seen on SecPulse Feb 29, 2024

Original description The description as published by the source.

Server Side Request Forgery (SSRF) vulnerability in Likeshop before 2.5.7 allows attackers to view sensitive information via the avatar parameter in function UserLogic::updateWechatInfo.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
web thanhlo.substack.com

Key facts

Severity: Unrated
Published: Feb 29, 2024
First seen on SecPulse: Feb 29, 2024

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:02