wanglongcn ltcms API Endpoint multiDownload falsification de requête côté serveur

The SSRF vulnerability in ltcms allows an attacker to craft malicious requests through the /api/file/multiDownload endpoint. By manipulating the file argument, an attacker can force the server to make requests to arbitrary internal or external URLs. This could expose sensitive internal services, databases, or cloud resources that are not directly accessible from the internet. Successful exploitation could lead to data breaches, privilege escalation, and potentially even remote code execution if internal services are vulnerable. The public disclosure of this vulnerability significantly increases the risk of exploitation.

Organizations utilizing ltcms version 1.0.20–1.0.20, particularly those with sensitive internal resources accessible via the API, are at significant risk. Shared hosting environments running ltcms are also vulnerable, as they may lack the ability to implement granular network controls.

1. 2024-08-13Disclosure

   disclosure

1. Réservé2024-08-13
2. Publiée2024-08-13
3. Modifiée2024-08-15
4. EPSS mis à jour2026-04-02

The primary mitigation for CVE-2024-7742 is to immediately upgrade ltcms to version 1.0.21 or later, which contains the fix. If upgrading is not immediately feasible, consider implementing temporary workarounds such as restricting outbound network access from the ltcms server using a firewall or proxy. Implement strict input validation on the file parameter in the /api/file/multiDownload endpoint to prevent malicious URL manipulation. Monitor API logs for suspicious outbound requests.