medium5.9
CVE-2024-24028
Server Side Request Forgery (SSRF) vulnerability in Likeshop before 2.5.7 allows attackers to view sensitive information via the avatar parameter in function U…
Impact
Server Side Request Forgery (SSRF) vulnerability in Likeshop before 2.5.7 allows attackers to view sensitive information via the avatar parameter in function UserLogic::updateWechatInfo.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Likeshop | Likeshop | before 2.5.7 |