Skip to content
OpenAdvisories
Critical · 9.1 CVE-2024-25864 EUVD-2024-23171GHSA-xr49-qh48-cff9

Server Side Request Forgery (SSRF) vulnerability in Friendica versions after v.2023.12, allows a remote attacker to execute arbitrary code …

Published Apr 3, 2024 · Updated Mar 13, 2025 · Assigned by mitre

Description

Server Side Request Forgery (SSRF) vulnerability in Friendica versions after v.2023.12, allows a remote attacker to execute arbitrary code and obtain sensitive information via the fpostit.php component.

References