VulnerabilityDeferred

CVE-2024-54819

I, Librarian before and including 5.11.1 is vulnerable to Server-Side Request Forgery (SSRF) due to improper input validation in classes/security/validation.php

CRITICAL 9.1EPSS 21.0%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 21.0%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.

Description

I, Librarian before and including 5.11.1 is vulnerable to Server-Side Request Forgery (SSRF) due to improper input validation in classes/security/validation.php

CVSS 3.1: 9.1 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS: 20.98% probability · 98th percentile
Public exploits: None in Exploit-DB
CISA KEV: Not listed
Weakness: CWE-918
Source: cve@mitre.org

EPSS trend

EPSS moved from 20.8% on 14 October 2026 to 21.0% on 3 November 2026. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”.

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.