CVE-2024-35451

LinkStack 2.7.9 through 4.7.7 allows resources\views\components\favicon.blade.php link SSRF.
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

cpe:2.3:a:linkstack:linkstack:*:*:*:*:*:*:*:*

History

03 Jul 2025, 00:31

Type Values Removed Values Added
First Time Linkstack linkstack
Linkstack
References () https://datafarm.co.th/blog/CVE-2024-35451:-From-%28Authenticated%29-SSRF-to-Remote-Code-Execution - () https://datafarm.co.th/blog/CVE-2024-35451:-From-%28Authenticated%29-SSRF-to-Remote-Code-Execution - Third Party Advisory, Exploit
CPE cpe:2.3:a:linkstack:linkstack:*:*:*:*:*:*:*:*

29 Nov 2024, 05:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-11-29 05:15

Updated : 2025-07-03 00:31


NVD link : CVE-2024-35451

Mitre link : CVE-2024-35451


JSON object : View

Products Affected

linkstack

  • linkstack
CWE

No CWE.