PT-2026-4266 · Themegoods · Photome

Tran Nguyen Bao Khanh

·

CVE-2026-24381

·

Publicado

2026-01-22

·

Atualizado

2026-01-22

CVSS v3.1

5.4

Média

VetorAV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions PhotoMe versions prior to 5.7.2
Description A Server-Side Request Forgery (SSRF) vulnerability exists in ThemeGoods PhotoMe. This allows for Server Side Request Forgery. The vulnerability allows an attacker to make requests on behalf of the server, potentially accessing internal resources or performing actions with the server's privileges.
Recommendations Update PhotoMe to version 5.7.2 or later.

Correção

SSRF

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

CVE-2026-24381

Produtos afetados

Photome