CVE-2024-39954 | Apache EventMesh Runtime up to 1.11.0 WebhookUtil.java server-side request forgery

June 30, 2025 Yanac

A vulnerability was found in Apache EventMesh Runtime up to 1.11.0. It has been declared as critical. This vulnerability affects unknown code of the file WebhookUtil.java. The manipulation leads to server-side request forgery.

This vulnerability was named CVE-2024-39954. The attack can be initiated remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More