CVE-2024-37359 is a critical Server-Side Request Forgery (SSRF) vulnerability affecting Hitachi Vantara Pentaho Business Analytics Server. This flaw allows attackers to potentially bypass security controls by manipulating the server into making requests to unintended destinations. Due to insufficient validation of the Host header in HTTP/HTTPS requests, attackers can exploit the server as a proxy to conduct port scanning on internal networks or access sensitive local files. The server versions affected are before 10.2.0.0 and 9.3.0.9, including 8.3.x. With an SVRS score of 75, this vulnerability poses a significant risk, potentially enabling attackers to access internal resources and sensitive data. Although not considered critical per SOCRadar, the high score warrants careful monitoring and timely patching to prevent exploitation, especially since it is tagged as "In The Wild". Successful exploitation can lead to information disclosure and unauthorized access to internal systems.