PT-2024-29580

CVE-2024-41813

·

Published

2024-07-26

·

Updated

2024-09-30

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions txtdot versions 1.4.0 through 1.6.0
Description A Server-Side Request Forgery (SSRF) issue exists in the /proxy route, allowing remote attackers to send HTTP GET requests to arbitrary targets and retrieve internal network information.
Recommendations For txtdot versions 1.4.0 through 1.6.0, update to version 1.6.1 to resolve the issue.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-918: Server-Side Request Forgery (SSRF)
Related identifiers
CVE-2024-41813
GHSA-4C78-229V-HF6M
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com