Packagist/vufind/vufind CVE-2024-25737: critical 9.1, EPSS 0.45%

VuFind Server-Side Request Forgery (SSRF) vulnerability

Action: Upgrade vufind/vufind to 9.1.1 or later.

composer require vufind/vufind:9.1.1

Affected

Fixed versions

Sources

• osv: GHSA-fwhc-mm9q-mqq8
• https://nvd.nist.gov/vuln/detail/CVE-2024-25737
• https://github.com/vufind-org/vufind/commit/345d00f7d7f1c581f46742effdac70e803b3847b
• https://github.com/vufind-org/vufind/commit/51f2ddac0dc1047e6fd3b27e6d984b19e1601d00
• https://github.com/vufind-org/vufind
• https://vufind.org/wiki/security:cve-2024-25737

CVE-2024-25737 · published 2024-05-22T21:30:34Z · modified 2024-11-23T05:24:09.496082Z · JSON