Skip to content
OpenAdvisories
Critical · 9.3 CVE-2024-2796 EUVD-2024-27740GHSA-mr2g-87r5-j9x5

SSRF in Akana API Platform

Published Apr 18, 2024 · Updated Sep 17, 2024 · Assigned by Perforce

Vendor: Akana Product: Akana API Platform

Description

A server-side request forgery (SSRF) was discovered in the Akana API Platform in versions prior to and including 2022.1.3. Reported by Jakob Antonsson.

Affected products

VendorProductAffectedFixed
Akana Akana API Platform 2022.1.1 – < 2022.1.1 (CVE-2024-2796 Patch), 2022.1.2 – < 2022.1.2 (CVE-2024-2796 Patch), 0.0.0 – < 2024.1.0, 0.0.0 – < 2022.1.3.2 2022.1.1 (CVE-2024-2796 Patch)

References