CVE-2024-13195
Published: 09 January 2025
Summary
CVE-2024-13195 is a medium-severity SSRF (CWE-918) vulnerability in Donglight Bookstore. Its CVSS base score is 5.3 (Medium).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 27.6th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 AC-4 (Information Flow Enforcement) and SC-7 (Boundary Protection).
Deeper analysis
CVE-2024-13195 is a server-side request forgery (SSRF) vulnerability, classified as critical, in the donglight bookstore e-commerce book city system version 1.0.0. The flaw affects the getHtml function in the file src/main/java/org/zdd/bookstore/rawl/HttpUtil.java, where manipulation of the url argument triggers the SSRF. It is remotely exploitable and associated with CWE-918, with a CVSS 3.1 base score of 6.3 (AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).
An authenticated attacker with low privileges can exploit this vulnerability over the network with low complexity and no user interaction required. Exploitation enables SSRF, potentially allowing the attacker to make unauthorized requests from the server, resulting in low impacts to confidentiality, integrity, and availability.
Advisories are available via the project's GitHub issues at https://github.com/donglight/bookstore/issues/11 and VulDB entries including https://vuldb.com/?id.290787. The exploit has been publicly disclosed and may be used.
The vulnerability was published on 2025-01-09.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-51417
Vulnerability details
A vulnerability was found in donglight bookstore电商书城系统说明 1.0.0. It has been classified as critical. This affects the function getHtml of the file src/main/java/org/zdd/bookstore/rawl/HttpUtil.java. The manipulation of the argument url leads to server-side request forgery. It is possible to initiate the…
more
attack remotely. The exploit has been disclosed to the public and may be used.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
SSRF in public-facing web app directly enables remote exploitation via T1190.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly validates and sanitizes the manipulated 'url' argument in the getHtml function to prevent SSRF exploitation.
Monitors and controls outbound network communications at system boundaries to block unauthorized server-initiated requests from SSRF.
Enforces information flow control policies restricting the getHtml function from accessing unauthorized internal or external resources via forged URLs.