GitHub Advisoryadvisory · Packagist

GHSA-fwhc-mm9q-mqq8 VuFind Server-Side Request Forgery (SSRF) vulnerability

CRITICAL Published 2024-05-22 Modified 2024-05-23 Official page ↗
Aliases
CVE-2024-25737
Ecosystem
Packagist
Packages
vufind/vufind
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-79, CWE-918
Reviewed
2024-05-23

Affected packages

• Packagist vufind/vufind: >= 2.4, < 9.1.1 → fixed in 9.1.1

Description

A Server-Side Request Forgery (SSRF) vulnerability in the /Cover/Show route (showAction in CoverController.php) in Open Library Foundation VuFind 2.4 through 9.1 before 9.1.1 allows remote attackers to access internal HTTP servers and perform Cross-Site Scripting (XSS) attacks by proxying arbitrary URLs via the proxy GET parameter.

Related

Alias · CVE (1)

  • CVE-2024-25737 A Server-Side Request Forgery (SSRF) vulnerability in the /Cover/Show route (showAction in CoverController.php) in Open Library Foundation… vulnerability

Weakness · CWE (2)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness
  • CWE-918 Server-Side Request Forgery weakness

References