CVEvulnerability
CVE-2024-5736
8.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2024-06-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 4.0 ([email protected])
- 8.2 HIGH — CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:D/RE:L/U:Green
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-918
Description
Server Side Request Forgery (SSRF) vulnerability in AdmirorFrames Joomla! extension in afGdStream.php script allows to access local files or server pages available only from localhost. This issue affects AdmirorFrames: before 5.0.
Affected configurations
• admiror-design-studio admirorframes (< 5.0)
Related
Weakness · CWE (1)
- CWE-918 Server-Side Request Forgery weakness
References
- https://cert.pl/en/posts/2024/06/CVE-2024-5735/ Third Party Advisory
- https://cert.pl/posts/2024/06/CVE-2024-5735/ Third Party Advisory
- https://github.com/afine-com/CVE-2024-5736 Exploit, Third Party Advisory
- https://github.com/sectroyer/CVEs/tree/main/CVE-2024-5736 Exploit, Third Party Advisory
- https://github.com/vasiljevski/admirorframes/issues/3 Issue Tracking
- https://cert.pl/en/posts/2024/06/CVE-2024-5735/ Third Party Advisory
- https://cert.pl/posts/2024/06/CVE-2024-5735/ Third Party Advisory
- https://github.com/afine-com/CVE-2024-5736 Exploit, Third Party Advisory
- https://github.com/sectroyer/CVEs/tree/main/CVE-2024-5736 Exploit, Third Party Advisory
- https://github.com/vasiljevski/admirorframes/issues/3 Issue Tracking