← Database

CVE-2024-44677

CRITICAL CVSS: 9.8 Published: 2024-09-10 Modified: 2026-06-17

Description

eladmin v2.7 and before is vulnerable to Server-Side Request Forgery (SSRF) which allows an attacker to execute arbitrary code via the DatabaseController.java component.

Affected Platforms

Eladmin Eladmin

Weakness Type

CWE-918, CWE-352

References