CVE-2024-24028

—

CVSS 3.1

5.9 medium

EPSS

<1%p12

Published

Mar 21, 2024 (Mar 21, 2024)

Modified

Jun 17, 2026

Description

Server Side Request Forgery (SSRF) vulnerability in Likeshop before 2.5.7 allows attackers to view sensitive information via the avatar parameter in function UserLogic::updateWechatInfo.

Vendors: likeshop
Products: likeshop
Weakness: CWE-918
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.