CVE-2024-7330

CVE-2024-7330 is a critical server-side request forgery (SSRF) vulnerability affecting YouDianCMS 7, specifically within the curl_exec function in the /App/Core/Extend/Function/ydLib.php file. This vulnerability allows a remote attacker to manipulate the 'url' argument, potentially leading to unauthorized access to internal resources or other network services. The CVSS v3.1 score of 6.3 (Medium) indicates a low attack complexity and requires low privileges, but its impact is limited to low confidentiality, integrity, and availability. Despite the critical classification by the original reporter, the CVSS score suggests a moderate risk. While the exploit has been publicly disclosed, there is currently no evidence of active exploitation, nor are there readily available exploit modules in common frameworks like Metasploit or Nuclei. Community discussion and media coverage for this CVE are minimal, suggesting low public awareness at this time.