CVE-2024-27620
Published: 06 April 2024
Summary
CVE-2024-27620 is a high-severity SSRF (CWE-918) vulnerability in Ladder (inferred from references). Its CVSS base score is 7.5 (High).
Operationally, ranked in the top 8.5% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
Deeper analysis
CVE-2024-27620 is a server-side request forgery vulnerability affecting Ladder versions 0.0.1 through 0.0.21. The flaw, tracked under CWE-918, resides in the application's API handling and permits an unauthenticated remote attacker to submit specially crafted requests that cause the server to fetch arbitrary resources. The issue carries a CVSS 3.1 base score of 7.5, reflecting network attack vector, low complexity, and high impact on confidentiality with no required privileges or user interaction.
An attacker can exploit the vulnerability by sending malicious API requests that leverage the application's SSRF capability to reach internal services or external systems, thereby disclosing sensitive information that would otherwise be inaccessible. Because the attack requires no authentication, it can be launched from any network position that can reach the Ladder instance.
Public references, including a Packet Storm advisory and the project's GitHub pages, document the SSRF behavior in Ladder 0.0.21 but do not detail official patches or configuration workarounds. The associated EPSS score has remained flat at 0.0683 with no material increase since disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-24814
Vulnerability details
An issue in Ladder v.0.0.1 thru v.0.0.21 allows a remote attacker to obtain sensitive information via a crafted request to the API.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Penetration testing attempts server-side requests to internal resources, identifying SSRF weaknesses for remediation.
Outbound connections to external resources can be monitored and limited at the boundary, reducing SSRF impact.
Validates server-side URLs and resource references to block SSRF attempts.
Detects server-side request forgery through monitoring of unexpected outbound connections.