CVE-2024-29090 is a Server-Side Request Forgery (SSRF) vulnerability affecting the Jordy Meow AI Engine: ChatGPT Chatbot, specifically versions up to and including 2.1.4. Rated as MEDIUM severity with a CVSS score of 6.8, this vulnerability allows a highly privileged attacker to initiate requests from the server to other internal or external resources, potentially leading to information disclosure. While the attack complexity is low, successful exploitation could result in high confidentiality impact. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 2.1.5CPE matchmatch criteria | cpe:2.3:a:meowapps:ai_engine:*:*:*:*:*:wordpress:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.