Security Advisory

CVE-2024-24028

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-02-29 00:00:00

Last updated 2024-11-07 21:30:41

Assigner mitre

State PUBLISHED

Description

Server Side Request Forgery (SSRF) vulnerability in Likeshop before 2.5.7 allows attackers to view sensitive information via the avatar parameter in function UserLogic::updateWechatInfo.

← Browse all CVEs View on cve.org ↗