CVE-2024-25738
1 advisory.
Packagist/vufind/vufind CVE-2024-25738: critical 9.1, EPSS 0.68%
VuFind Server-Side Request Forgery (SSRF) vulnerability
Action: Upgrade vufind/vufind to 9.1.1 or later.
composer require vufind/vufind:9.1.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0 | 9.1.1 | - |
Fixed versions
| 9.1.1 |
Sources
- osv: GHSA-wx24-vqrg-m6m5
- https://nvd.nist.gov/vuln/detail/CVE-2024-25738
- https://github.com/vufind-org/vufind/commit/a19577d3d87d68e5c3f8ade63added44882a193c
- https://github.com/vufind-org/vufind
- https://vufind.org/wiki/security:cve-2024-25738
CVE-2024-25738 · published · modified · JSON