CVE-2024-55089 MEDIUM

CVE-2024-55089

Vendor Rhymix
Product Rhymix
Weakness CWE-918 · SSRF
Published December 18, 2024
Last update February 20, 2026
View on NVD All CVEs

CVSS base score

4.1/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N

What the vulnerability does

01Description

Rhymix before 2.1.24 is vulnerable to Server-Side Request Forgery (SSRF) in the background import data function because XML documents may contain external entities.

Key dates

02Disclosure timeline

December 18, 2024 CVE published
February 20, 2026 Record updated