CVE-2024-34319: n/a

CVE-2024-34319 is an SSRF vulnerability in ProPhoenix Law RMS v2022.2403.3.101. The vulnerability arises from insufficient validation of the serviceURL parameter, enabling attackers to coerce the server into making arbitrary DNS and HTTP requests. This can potentially be leveraged to access internal resources or conduct further attacks, although no specific exploitation details or active exploits are reported.

The vulnerability allows attackers to induce the server to make unintended network requests, which may lead to information disclosure or facilitate further attacks depending on the internal network configuration. No confirmed active exploitation is known at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the vulnerable parameter and monitor for suspicious requests targeting the serviceURL parameter.