CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.3. It affects Windows, Linux, Java.
CVE
CVE-2024-39954
Severity
MEDIUM
CVSS
6.3
EPSS
0.39%
Windows Linux Java
Original NVD Description
CWE-918 Server-Side Request Forgery (SSRF) in eventmesh-runtime module in WebhookUtil.java on windows\linux\mac os e.g. allows the attacker can abuse functionality on the server to read or update internal resources. Users are recommended to upgrade to version 1.12.0 or use the master branch , which fixes this issue.
Related CVEs
Other vulnerabilities affecting the same vendor(s)