← All advisories

Medium severity4.8NVD Advisory· Published Nov 29, 2024· Updated Jun 17, 2026

CVE-2024-35451

CVE-2024-35451

Description

LinkStack 2.7.9 through 4.7.7 allows resources\views\components\favicon.blade.php link SSRF.

Affected products

3

Linkstack/Linkstack2 versions
cpe:2.3:a:linkstack:linkstack:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:linkstack:linkstack:*:*:*:*:*:*:*:*range: >=2.7.9,<=4.7.7
- (no CPE)
LinkStackOrg/LinkStackllm-fuzzy
Range: 2.7.9 - 4.7.7

Patches

Vulnerability mechanics

References

1

datafarm.co.th/blog/CVE-2024-35451:-From-%28Authenticated%29-SSRF-to-Remote-Code-ExecutionnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.