Skip to content
OpenAdvisories
Critical · 9.1 CVE-2024-50811 EUVD-2024-45003GHSA-887p-gwwf-wm9g

hopetree izone lts c011b48 contains a server-side request forgery (SSRF) vulnerability in the active push function as \\apps\\tool\\apis\\b…

Published Nov 8, 2024 · Updated Nov 21, 2024 · Assigned by mitre

Description

hopetree izone lts c011b48 contains a server-side request forgery (SSRF) vulnerability in the active push function as \\apps\\tool\\apis\\bd_push.py does not securely filter user input through push_urls() and get_urls().

References