CVE-2024-55089: Rhymix

Medium severity, CVSS 4.1. EPSS: 0.2% chance of exploitation in the next 30 days.

Rhymix before 2.1.24 is vulnerable to Server-Side Request Forgery (SSRF) in the background import data function because XML documents may contain external entities.

Affected products

• Rhymix Rhymix: version 2.1.19 only

Published 2024-12-18. Last modified 2026-06-17.