CVE-2024-0308

A vulnerability was found in Inis up to 2.0.1. It has been rated as critical. This issue affects some unknown processing of the file app/api/controller/default/Proxy.php. The manipulation of the argument p_url leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249875.

• CWE-918

• https://note.zhaoj.in/share/2E2JG2PClHGFBroken Link
• https://vuldb.com/?ctiid.249875Permissions Required, Third Party Advisory
• https://vuldb.com/?id.249875Permissions Required, Third Party Advisory
• https://note.zhaoj.in/share/2E2JG2PClHGFBroken Link
• https://vuldb.com/?ctiid.249875Permissions Required, Third Party Advisory
• https://vuldb.com/?id.249875Permissions Required, Third Party Advisory

Published

Jan 8, 2024

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-0302A vulnerability, which was classified as critical, has been …9.8
• CVE-2024-0303A vulnerability, which was classified as critical, was found…9.8
• CVE-2024-0304A vulnerability has been found in Youke365 up to 1.5.3 and c…9.8
• CVE-2024-0305A vulnerability was found in Guangzhou Yingke Electronic Tec…7.5
• CVE-2024-0306A vulnerability was found in Kashipara Dynamic Lab Managemen…7.5
• CVE-2024-0307A vulnerability was found in Kashipara Dynamic Lab Managemen…7.5
• CVE-2024-0310 A content-security-policy vulnerability in ENS Control brow…6.1
• CVE-2024-0311A malicious insider can bypass the existing policy of Skyhig…5.5
• CVE-2024-0312A malicious insider can uninstall Skyhigh Client Proxy witho…5.5
• CVE-2024-0313A malicious insider exploiting this vulnerability can circum…5.5
• CVE-2024-0314XSS vulnerability in FireEye Central Management affecting ve…6.1
• CVE-2024-0315Remote file inclusion vulnerability in FireEye Central Manag…7.8