CVE-2024-55088

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Dec 18, 2024
Updated: Dec 21, 2024
CWE ID 352

Summary

CVE-2024-55088 refers to a Server-Side Request Forgery (SSRF) vulnerability affecting GetSimple CMS CE version 3.3.19. Malicious actors can exploit this issue by sending crafted requests to the backend plugin module, potentially gaining unauthorized access to internal resources or conducting other unintended actions on the affected system. Successful exploitation could result in data leakage, denial-of-service attacks or even unauthorized system modifications. It is essential to update to a patched version as soon as possible to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share