VULNERABILITY INTELLIGENCE

CVE-2024-22873

CVSS score8.1 HIGH

EPSS probability0.55%

CISA KEVNot currently listed

Published2024-02-26

Last modified2026-07-09

Description

Tencent Blueking CMDB v3.2.x to v3.9.x was discovered to contain a Server-Side Request Forgery (SSRF) via the event subscription function (/service/subscription.go). This vulnerability allows attackers to access internal requests via a crafted POST request.