CVE-2024-39954
1 advisory.
Maven/org.apache.eventmesh:eventmesh-runtime CVE-2024-39954: medium 6.3, EPSS 0.40%
Apache EventMesh Vulnerable to Server-Side Request Forgery in WebhookUtil.java
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.6.0-release | - | 1.11.0-release |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-hf86-8x8v-h7vc
- https://nvd.nist.gov/vuln/detail/CVE-2024-39954
- https://github.com/apache/eventmesh
- https://lists.apache.org/thread/v6c96zygqx8xc2k3n2d59mgnm5txhkon
CVE-2024-39954 · published · modified · JSON