Security Advisory

CVE-2024-22873

8.1
HIGH

Vulnerability Description

Tencent Blueking CMDB v3.2.x to v3.9.x was discovered to contain a Server-Side Request Forgery (SSRF) via the event subscription function (/service/subscription.go). This vulnerability allows attackers to access internal requests via a crafted POST request.
Published Date February 26, 2024
Official Source NIST NVD Advisory