CVE-2024-54330 describes an SSRF vulnerability in hurraki Hurrakify versions up to 2.4. SSRF vulnerabilities enable attackers to make the server perform unauthorized requests, which can lead to partial compromise of confidentiality and integrity. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) indicates the attack can be performed remotely without privileges or user interaction, affects system scope, and results in low confidentiality and integrity impacts without availability impact. No patch or vendor advisory is currently available to confirm remediation status.

The vulnerability allows remote attackers to induce the server to make unauthorized requests, potentially exposing internal resources or sensitive information, resulting in limited confidentiality and integrity impacts. There is no indication of availability impact. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users should monitor vendor communications for updates. Until a fix is available, consider restricting server outbound requests or implementing network-level controls to limit SSRF attack surface.