CVE-2024-22873

HighCVSS 8.1

Published: 26/02/2024(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.54%

42th percentile - higher than 42% of all known CVEs

Summary

An SSRF vulnerability in Tencent Blueking CMDB versions 3.2.x to 3.9.x allows attackers to make internal requests via the event subscription function. Exploitation is possible through a crafted POST request to the /service/subscription.go endpoint.

Risk Assessment

Attackers can access internal systems and services, potentially leading to data leakage, privilege escalation, or further attacks on the infrastructure.

Recommendation

Immediately update Tencent Blueking CMDB to a version later than 3.9.x that includes a fix for the SSRF vulnerability. Additionally, restrict access to the event subscription function and apply network traffic filtering.

Other vulnerabilities in Tencent Blueking CMDB

CVE-2026-119648Medium
Tencent BlueKing CMDB (bk-cmdb) through 3.14.6 contains a missing authorization vulnerability that allows authenticated users to view hosts of other businesses via POST /api/v3/hosts/search/asstdetail. An attacker can submit host search conditions targeting other businesses or omitting business filters to retrieve host attributes and topology association details, because the route is mapped to SkipAction and SearchHostWithAsstDetail skips AuthorizeSearchHost.

Original NVD description (English source)

Tencent Blueking CMDB v3.2.x to v3.9.x was discovered to contain a Server-Side Request Forgery (SSRF) via the event subscription function (/service/subscription.go). This vulnerability allows attackers to access internal requests via a crafted POST request.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS