CVE-2024-5736 - CVE House

Status published High CVE-2024-5736

SSRF in AdmirorFrames Joomla! Extension

8.2 CVSS

Vulnerability Description

Server Side Request Forgery (SSRF) vulnerability in AdmirorFrames Joomla! extension in afGdStream.php script allows to access local files or server pages available only from localhost. This issue affects AdmirorFrames: before 5.0.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-5736

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Marcin Wyczechowski [AFINE Team]
Michał Majchrowicz [AFINE Team]

References

More from Nikola Vasilijevski

View All →

CVE-2024-5737

HTML Injection in AdmirorFrames Joomla! Extension

Medium 6.3

CVE-2024-5735

Full Path Disclosure in AdmirorFrames Joomla! Extension

Medium 6.3

Affected Vendor

Nikola Vasilijevski

View all reports →

Affected Software

AdmirorFrames

Vulnerable Versions:

Timeline

Official Publish: June 28th, 2024

Last Modified: August 1st, 2024

Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-918

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

Initial Access

T1213 Data from Information Repositories

Collection

T1005 Data from Local System