VYPR
← All advisories
Medium severity4.9NVD Advisory· Published Oct 25, 2024· Updated Jun 17, 2026

CVE-2024-48232

CVE-2024-48232

Description

An issue was found in mipjz 5.0.5. In the mipPost method of \app\setting\controller\ApiAdminTool.php, the value of the postAddress parameter is not processed and is directly passed into curl_exec execution and output, resulting in a Server-side request forgery (SSRF) vulnerability that can read server files.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Sansanyun/Mipjzcpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: =5.0.5

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.