CVE-2024-55089
Rhymix before 2.1.24 is vulnerable to Server-Side Request Forgery (SSRF) in the background import data function because XML documents may contain exte...
Original description
The description as published by the source.
Rhymix before 2.1.24 is vulnerable to Server-Side Request Forgery (SSRF) in the background import data function because XML documents may contain external entities.
References
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web rhymix.org
- web tasteful-stamp-da4.notion.site