Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-23x2-p68q-c69p

Опубликовано: 10 июн. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

A Server-Side Request Forgery (SSRF) in the getFileBinary function of nbnbk cms 3 allows attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the URL parameter.

A Server-Side Request Forgery (SSRF) in the getFileBinary function of nbnbk cms 3 allows attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the URL parameter.

EPSS

Процентиль: 44%
0.00212
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 9.1
nvd
около 3 лет назад

A Server-Side Request Forgery (SSRF) in the getFileBinary function of nbnbk cms 3 allows attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the URL parameter.

EPSS

Процентиль: 44%
0.00212
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-918