CVE-2024-54385

CVSS 3.1 Score 7.2 of 10 (high)

Details

Published Dec 16, 2024
CWE ID 918

Summary

CVE-2024-54385 is a newly discovered Server-Side Request Forgery (SSRF) vulnerability affecting the SoftLab Radio Player. This issue permits an attacker to inject malicious requests, potentially leading to server-side data disclosure or arbitrary command execution. The Radio Player, from an unspecified version up to 2.0.82, is the affected software. It is crucial for users to update their installation as soon as a patch is made available to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share