Back to Database
Status published
High
CVE-2024-12867
Server-Side Request Forgery in Arctic Hub URL Mapper allows an unauthenticated remote attacker to exfiltrate and modify configurations and data
Vulnerability Description
Server-Side Request Forgery in URL Mapper in Arctic Security's Arctic Hub versions 3.0.1764-5.6.1877 allows an unauthenticated remote attacker to exfiltrate and modify configurations and data.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-12867
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Bob Van der Smissen
- 'Hack the Government' ethical hacking event hosted by the Centre for Cybersecurity Belgium (CCB)
Affected Vendor
Arctic Security
View all reports →Affected Software
Arctic Hub
Vulnerable Versions:
3.0.1764, 5.6.1877
Timeline
Official Publish:
December 20th, 2024
Last Modified:
December 24th, 2024
Added to House:
July 22nd, 2026