← Database

CVE-2024-4894

MEDIUM CVSS: 5.3 Published: 2024-05-15 Modified: 2026-06-17

Description

ITPison OMICARD EDM fails to properly filter specific URL parameter, allowing unauthenticated remote attackers to modify the parameters and conduct Server-Side Request Forgery (SSRF) attacks. This vulnerability enables attackers to probe internal network information.

Affected Platforms

Unknown

Weakness Type

CWE-918

References