Vulnerabilities > CVE-2024-5736 - Server-Side Request Forgery (SSRF) vulnerability in Admiror-Design-Studio Admirorframes

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
admiror-design-studio
CWE-918

Summary

Server Side Request Forgery (SSRF) vulnerability in AdmirorFrames Joomla! extension in afGdStream.php script allows to access local files or server pages available only from localhost. This issue affects AdmirorFrames: before 5.0.

Vulnerable Configurations

Part Description Count
Application
Admiror-Design-Studio
1

Common Weakness Enumeration (CWE)