---
id: 5226
title: "[CVE-2024-52598] SSRF & URI Validation Bypass in 2FAuth"
cve: CVE-2024-52598
source_domain: xbow.com
source_url: "https://xbow.com/blog/xbow-2fauth-ssrf"
published_at: "2024-11-22T13:00:00Z"
tags: ["cloud", "vulnerability-research", "open-source", "ssrf", "2fauth", "cve-2024-52598", "uri-validation"]
phying_url: "https://phying.com/item/5226"
lang: en
---

# [CVE-2024-52598] SSRF & URI Validation Bypass in 2FAuth

## Summary

XBOW's first 2FAuth report: an SSRF (CVE-2024-52598) in the OTP preview feature that bypasses MIME filtering to reach internal targets such as cloud metadata services.

## Intelligence Metadata

- **Sources:** xbow.com
- **CVE:** CVE-2024-52598
- **Published:** 2024-11-22T13:00:00Z
- **Original:** https://xbow.com/blog/xbow-2fauth-ssrf
- **Phying News:** https://phying.com/item/5226