Description
A vulnerability was found in wanglongcn ltcms 1.0.20. It has been declared as critical. Affected by this vulnerability is the function downloadUrl of the file /api/file/downloadUrl of the component API Endpoint. The manipulation of the argument file leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-08-13
Score: 6.9 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2024-48620 A vulnerability was found in wanglongcn ltcms 1.0.20. It has been declared as critical. Affected by this vulnerability is the function downloadUrl of the file /api/file/downloadUrl of the component API Endpoint. The manipulation of the argument file leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
History

Wed, 21 Aug 2024 19:45:00 +0000

Type Values Removed Values Added
First Time appeared Ltcms
Ltcms ltcms
CPEs cpe:2.3:a:ltcms:ltcms:1.0.20:*:*:*:*:*:*:*
Vendors & Products Ltcms
Ltcms ltcms

Fri, 16 Aug 2024 15:30:00 +0000

Type Values Removed Values Added
First Time appeared Wanglongcn
Wanglongcn ltcms
CPEs cpe:2.3:a:wanglongcn:ltcms:1.0.20:*:*:*:*:*:*:*
Vendors & Products Wanglongcn
Wanglongcn ltcms
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 13 Aug 2024 21:15:00 +0000

Type Values Removed Values Added
Description A vulnerability was found in wanglongcn ltcms 1.0.20. It has been declared as critical. Affected by this vulnerability is the function downloadUrl of the file /api/file/downloadUrl of the component API Endpoint. The manipulation of the argument file leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Title wanglongcn ltcms API Endpoint downloadUrl server-side request forgery
Weaknesses CWE-918
References
Metrics cvssV2_0

{'score': 7.5, 'vector': 'AV:N/AC:L/Au:N/C:P/I:P/A:P'}

cvssV3_0

{'score': 7.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L'}

cvssV3_1

{'score': 7.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L'}

cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N'}

Subscriptions

Ltcms Ltcms
Wanglongcn Ltcms
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2024-08-16T14:36:42.789Z

Reserved: 2024-08-13T14:13:31.152Z

Link: CVE-2024-7743

cve-icon Vulnrichment

Updated: 2024-08-16T14:36:30.697Z

cve-icon NVD

Status : Analyzed

Published: 2024-08-13T21:15:17.197

Modified: 2024-08-21T19:15:54.553

Link: CVE-2024-7743

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses