CAS <= 1.0.0 - Unauthenticated SSRF
CVE-2024-4399

Currently unrated

Key Information:

Vendor

Apereo

Status
Vendor
CVE Published:
23 May 2024

Badges

๐Ÿ‘พ Exploit Exists๐ŸŸก Public PoC

What is CVE-2024-4399?

The does not validate a parameter before making a request to it, which could allow unauthenticated users to perform SSRF attack

Affected Version(s)

cas 0 <= 1.0.0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

References

Timeline

  • ๐ŸŸก

    Public PoC available

  • ๐Ÿ‘พ

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Aly Khaled Aly Abd Al-aal
WPScan
.