CVE-2024-2796 - CVE House

Status published Critical CVE-2024-2796

SSRF in Akana API Platform

9.3 CVSS

Vulnerability Description

A server-side request forgery (SSRF) was discovered in the Akana API Platform in versions prior to and including 2022.1.3. Reported by Jakob Antonsson.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-2796

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://portal.perforce.com/s/detail/a91PA000001STuXYAW

More from Akana

View All →

CVE-2024-5250

Overly Verbose Errors in SAML Integration

XML External Entity in Akana

Medium 6.3

CVE-2024-3826

Broken SAML Validation

High 8.6

Affected Vendor

Akana

View all reports →

Affected Software

Akana API Platform

Vulnerable Versions:

2022.1.1, 2022.1.2, 0.0.0

Timeline

Official Publish: April 18th, 2024

Last Modified: September 17th, 2024

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

Weaknesses (CWE)

CWE-918

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

Initial Access

T1213 Data from Information Repositories

Collection

T1005 Data from Local System