Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2024-4894

ITPison OMICARD EDM - Server-Side Request Forgery

Description

ITPison OMICARD EDM fails to properly filter specific URL parameter, allowing unauthenticated remote attackers to modify the parameters and conduct Server-Side Request Forgery (SSRF) attacks. This vulnerability enables attackers to probe internal network information.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ITPison OMICARD EDM

Default version status: unaffected

  • earlier to < 6.0affected

References