Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2024-27775

SysAid - CWE-918: Server-Side Request Forgery (SSRF)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
INCD

Description

SysAid before version 23.2.14 b18 - CWE-918: Server-Side Request Forgery (SSRF) may allow exposing the local OS user's NTLMv2 hash

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SysAid SysAid

Default version status: unaffected

  • version 23.2.14 b18 to ≤ Upgrade to version 23.3.38 or lateraffected

References