{"uuid": "b08c0021-ac7c-47cc-8e82-8192256f54c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-21893", "type": "exploited", "source": "https://t.me/KomunitiSiber/1447", "content": "Recent SSRF Flaw in Ivanti VPN Products Undergoes Mass Exploitation\nhttps://thehackernews.com/2024/02/recently-disclosed-ssrf-flaw-in-ivanti.html\n\nA recently disclosed server-side request forgery (SSRF) vulnerability impacting Ivanti Connect Secure and Policy Secure products has come under mass exploitation.\nThe Shadowserver Foundation\u00a0said\u00a0it observed exploitation attempts originating from more than 170 unique IP addresses that aim to establish a reverse shell, among others.\nThe attacks exploit\u00a0CVE-2024-21893\u00a0(CVSS", "creation_timestamp": "2024-02-06T09:28:09.000000Z"}