CVE-2024-4219

CRITICAL 9.1CVE-2024-4219 · Published 04/06/2024 · updated 17/06/2026

In short

CVE-2024-4219 is a CRITICAL (CVSS 9.1) vulnerability affecting beyondinsight (beyondtrust).
Chance of exploitation in the next 30 days (EPSS): 0.22%, higher than 12.1% of all vulnerabilities.
Fix: update to 23.2 or later.

Package	Affected versions	Patched versions
beyondinsight beyondtrust	`< 23.2`	`23.2`

Description

Prior to 23.2, it is possible to perform arbitrary Server-Side requests via HTTP-based connectors within BeyondInsight, resulting in a server-side request forgery vulnerability.

References

beyondtrust.com/trust-center/security-advisories/BT24-05 · Vendor Advisory

More vulnerabilities in beyondinsight

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free