Description
Server Side Request Forgery (SSRF) vulnerability in Likeshop before 2.5.7 allows attackers to view sensitive information via the avatar parameter in function UserLogic::updateWechatInfo.
Medium · 5.9
CVE-2024-24028
EUVD-2024-21454GHSA-3537-379x-x582
Server Side Request Forgery (SSRF) vulnerability in Likeshop before 2.5.7 allows attackers to view sensitive information via the avatar par…
Published Feb 29, 2024 · Updated Nov 7, 2024 · Assigned by mitre