CVE-2024-12840

Summary

CVE-2024-12840 is a new server-side request forgery (SSRF) vulnerability that has been identified in Satellite. This issue arises when handling PUT HTTP requests to the /http_proxies/test_connection endpoint. An attacker can exploit this flaw by setting the http_proxies variable as localhost and triggering the vulnerability. As a result, the attacker is able to retrieve the localhost banner, potentially gaining unauthorized access to sensitive information. This vulnerability poses a significant risk to systems running Satellite and requires immediate remediation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.