medium5.4Public exploit code
CVE-2024-51463
IBM i 7.3, 7.4, and 7.5 is vulnerable to server-side request forgery (SSRF).
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IBMi Navigator 7.5 - Server Side Request Forgery (SSRF)2025-04-15 · webapps · multiple
Impact
IBM i 7.3, 7.4, and 7.5 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | I | Versions 7.3, 7.4, 7.5 |