CVE-2024-5782
📛 CVE Title
CVE-2024-5782
Description
No English description in the CVE record.
Overview
- State
- REJECTED
- Assigner (CNA)
- @huntr_ai
- CVSS severity
- —
- CVSS score
- —
- CVSS vector
- —
- Effective score
- no score available from CNA, NVD, or AI yet
- CWE(s)
- —
- Reserved
- 2024-06-08
- Published
- —
- Last updated
- 2024-06-12 07:27 UTC
- Source
- https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/5xxx/CVE-2024-5782.json
NVD triage scoring NVD CVE 2.0
Layer NVD adds on top of the CNA's CVE record — published / last-modified timestamps, exploitability / impact subscores, and the FIRST.org EPSS probability that this CVE will be exploited in the wild in the next 30 days.
- NVD published
- 2024-06-12 08:15:51 UTC
- NVD last modified
- 2024-06-12 08:15:51 UTC
NVD / KEV / EPSS data refreshed 2026-05-25 01:07 UTC. Re-run the 🛰 Backfill from NVD button above to refresh.
AI-forensic CVSS estimate
Used only when a CVE has no official CVSS from its CNA or NVD. An LLM estimates the v3.1 base score from the description; a HIGH/CRITICAL estimate promotes the CVE to a Threat.
No AI estimate yet — it runs automatically once NVD has been checked, or click the button above.
Vendor references (0)
References embedded in the original CVE record by the assigning CNA.
None in the CVE record.
Web references (0)
DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.
No web references attached yet.
Remediations (10)
-
web:blog.qualys.com
Microsoft released its November Patch Tuesday Security Updates. Here's a quick breakdown of what you need to know. Microsoft Patch Tuesday for November 2025 This month's release addresses 68 vulnerabilities, including five critical and 59 important-severity vulnerabilities. In this month's updates, Microsoft has addressed a zero-day vulnerability that was being exploited in the wild ...
2026-05-23 22:09 UTC -
web:cvefeed.io
Description Next.js is a React framework for building full-stack web applications. Prior to versions 14.2.32 and 15.4.7, when next () was used without explicitly passing the request object, it could lead to SSRF in self-hosted applications that incorrectly forwarded user-supplied headers. This vulnerability has been fixed in Next.js versions 14.2.32 and 15.4.7. All users implementing custom ...
2026-05-23 22:09 UTC -
web:krebsonsecurity.com
Microsoft Corp. today issued security updates to fix more than 80 vulnerabilities in its Windows operating systems and software. There are no known "zero-day" or actively exploited vulnerabilities ...
2026-05-23 22:09 UTC -
web:learn.microsoft.com
Remediate security weaknesses discovered through security recommendations, and create exceptions if needed, in Defender Vulnerability Management.
2026-05-23 22:09 UTC -
web:nvd.nist.gov
An official website of the United States government Here's how you know
2026-05-23 22:09 UTC -
web:www.appsecure.security
CVE -2025-57822 CVE -2025-57822: Medium Vulnerability in Vercel Next.js A medium-severity SSRF vulnerability exists in Vercel's Next.js framework affecting versions prior to 14.2.32 and 15.4.7. Users should upgrade their installations immediately to mitigate risks.
2026-05-23 22:09 UTC -
web:www.computerworld.com
Each month, the team at Readiness analyzes the latest Patch Tuesday updates from Microsoft and provides detailed, actionable testing guidance. The company's Patch Tuesday release for February ...
2026-05-23 22:09 UTC -
web:www.cve.org
At cve .org, we provide the authoritative reference method for publicly known information-security vulnerabilities and exposures
2026-05-23 22:09 UTC -
web:www.oracle.com
This Critical Patch Update contains 481 new security patches across the product families listed below. Please note that an MOS note summarizing the content of this Critical Patch Update and other Oracle Software Security Assurance activities is located at April 2026 Critical Patch Update: Executive Summary and Analysis.
2026-05-23 22:09 UTC -
web:www.resolvedsecurity.com
The patch updates route handling to only process the Location header as a redirect if the response uses a recognized HTTP redirect status code, instead of treating every response with a Location header as a redirect. This fix addresses CVE -2025-57822 by preventing attackers from forging Location headers on non-redirect responses (e.g., HTTP 200), which previously could have caused unwanted or ...
2026-05-23 22:09 UTC
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.
Raw JSON
The full cvelistV5 record. Download as CVE-2024-5782.json.
{
"containers": {
"cna": {
"providerMetadata": {
"dateUpdated": "2024-06-12T07:27:36.463Z",
"orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"shortName": "@huntr_ai"
},
"rejectedReasons": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
}
],
"value": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
}
]
}
},
"cveMetadata": {
"assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"assignerShortName": "@huntr_ai",
"cveId": "CVE-2024-5782",
"dateRejected": "2024-06-12T07:27:36.463Z",
"dateReserved": "2024-06-08T14:31:45.096Z",
"dateUpdated": "2024-06-12T07:27:36.463Z",
"state": "REJECTED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}