CVE-2024-25738
A Server-Side Request Forgery (SSRF) vulnerability in the /Upgrade/FixConfig route in Open Library Foundation VuFind 2.0 through 9.1 before 9.1.1 allows a remote attacker to overwrite local configu...
Affects 0 products across 2 vendors.
Attacker causes the server to make HTTP requests to attacker-chosen destinations, potentially reaching internal services.
Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.
A Server-Side Request Forgery (SSRF) vulnerability in the /Upgrade/FixConfig route in Open Library Foundation VuFind 2.0 through 9.1 before 9.1.1 allows a remote attacker to overwrite local configuration files, potentially gaining access to the administrator panel and achieving Remote Code Execution.
BSID: BS-2024-GLOBAL-049293-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2024-25738?
What is the CVSS score for CVE-2024-25738?
Is CVE-2024-25738 actively exploited?
How do I remediate CVE-2024-25738?
What systems are affected by CVE-2024-25738?
| CVE ID | CVE-2024-25738 |
|---|---|
| BSID | BS-2024-GLOBAL-049293-C BreachSpider Global ID |
| CVSS Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
| Published | 2024-05-22 |
| Last Modified | 2026-04-15 |
| ICS Relevance | 15% |
| Weakness (CWE) | |
| Source | NVD |
A Server-Side Request Forgery (SSRF) vulnerability in the /Upgrade/FixConfig route in Open Library Foundation VuFind 2.0 through 9.1 before 9.1.1 allows a remote attacker to overwrite local configuration files to gain access to the administrator panel and achieve Remote Code Execution. A mitigating factor is that it requires the allow_url_include PHP runtime setting to be on, which is off in default installations. It also requires the /Upgrade route to be exposed, which is exposed by default after installing VuFind, and is recommended to be disabled by setting autoConfigure to false in config.ini.
Source: NIST NVD / MITRE CVE Database
The vulnerability exists in the /Upgrade/FixConfig route of VuFind versions 2.0 through 9.1 before 9.1.1. An attacker can exploit this by sending a specially crafted request that leverages the SSRF vulnerability to overwrite local configuration files. This can lead to unauthorized access to the administrator panel and, under certain conditions, Remote Code Execution. The attack requires the allow_url_include PHP runtime setting to be enabled, which is off by default.
Exploitation Likelihood: HIGH
| Vendor | Product | Fixed Version |
|---|---|---|
| Files | — | — |
| Foundation | — | — |
No patch URL on record. Monitor vendor security advisories directly.
| CISA KEV | Not in KEV catalog |
|---|---|
| Public Exploit | Not confirmed |
| PoC Code | Not confirmed |
SAGE Enrichment Record — provenance & audit hash
| Model | /workspace/models/qwen2.5-coder-32b-instruct-bf16 |
|---|---|
| Confidence | HIGH |
| Enriched At | 2026-05-24 |
| SHA-512 Audit Hash | 222c59c4d4f1a55c899550dace4a060c6f1dca12b14f5be29f49f154324896e452278ed89b3cc8c05193b9cdb766e2cccd658bf3723c600918b18a91bc26ef20 |
Critical Severity - Know Your Exposure
A CVSS 9.1 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.
Check Your Assets Free →