What’s Vulnerable › Vulnerabilities

CVE-2024-55089

• Severity: medium (CVSS 4.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-12-18 · updated 2026-06-17
• Weakness: CWE-918

Description

Rhymix before 2.1.24 is vulnerable to Server-Side Request Forgery (SSRF) in the background import data function because XML documents may contain external entities.

Affected products

• Rhymix: 2.1.19

References

• https://github.com/rhymix/rhymix/commit/464985b1ef382cc8cf852e9b028a960aa58b40c3
• https://rhymix.org/news/1909005
• https://tasteful-stamp-da4.notion.site/CVE-2024-55089-15b1e0f227cb8064a563c697709b7530?pvs=73

Get alerted when CVE-2024-55089 or the next vulnerability affects your stack