← Database

CVE-2024-4399

CRITICAL CVSS: 9.1 Published: 2024-05-23 Modified: 2026-06-17

Description

The does not validate a parameter before making a request to it, which could allow unauthenticated users to perform SSRF attack

Affected Platforms

Apereo Central Authentication Service

Weakness Type

CWE-918

References