CVE-2024-22217

CVSS 6.5 MEDIUMEPSS 0.3%CWE-918

A Server-Side Request Forgery (SSRF) vulnerability in Terminalfour before 8.3.19 allows authenticated users to use specific features to access internal services including sensitive information on the server that Terminalfour runs on.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://docs.terminalfour.com/articles/release-notes-highlights/https://docs.terminalfour.com/release-notes/security-notices/cve-2024-22217/