CVE-2024-5736CWE-918
SSRF in AdmirorFrames Joomla! Extension
High · published June 28, 2024
What it is
Server Side Request Forgery (SSRF) vulnerability in AdmirorFrames Joomla! extension in afGdStream.php script allows to access local files or server pages available only from localhost. This issue affects AdmirorFrames: before 5.0.
The record
Technical detail
- CVSS v4.0
- 8.2 · HIGH
- Vector
- CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/AU:Y/R:U/V:D/RE:L/U:Green
- EPSS
- 0.01227 · 68.6th percentile
- Weakness
- CWE-918 · Server-Side Request Forgery (SSRF)
- Published
- 2024-06-28T11:26Z
EPSS history
Timeline