Threat database

3 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	4.9	EPSS 0.5%	CVE-2024-48234mipjz · Server-Side Request Forgery (SSRF) Medium4.9EPSS 0.5%2024-10-25CVE Database V5CVE-2024-48234 An issue was discovered in mipjz 5.0.5. In the push method of app\tag\controller\ApiAdminTag.php the value of the postAddress parameter is not processed and is directly passed into curl_exec execution and output, resulting in Server-side request forgery (SSRF) vulnerability that can read server files. EPSS 0.5%Vulnerability CWE-918	CVE Database V5	2024-10-25
Medium	4.8	EPSS 0.3%	CVE-2024-48233mipjz · Cross-site Scripting Medium4.8EPSS 0.3%2024-10-25CVE Database V5CVE-2024-48233 mipjz 5.0.5 is vulnerable to Cross Site Scripting (XSS) in \app\setting\controller\ApiAdminSetting.php via the ICP parameter. EPSS 0.3%Vulnerability CWE-79	CVE Database V5	2024-10-25
Medium	4.9	EPSS 0.5%	CVE-2024-48232mipjz · Server-Side Request Forgery (SSRF) Medium4.9EPSS 0.5%2024-10-25CVE Database V5CVE-2024-48232 An issue was found in mipjz 5.0.5. In the mipPost method of \app\setting\controller\ApiAdminTool.php, the value of the postAddress parameter is not processed and is directly passed into curl_exec execution and output, resulting in a Server-side request forgery (SSRF) vulnerability that can read server files. EPSS 0.5%Vulnerability CWE-918	CVE Database V5	2024-10-25

Page 1 of 1