Описание
Server-Side Request Forgery in Feehi CMS
Feehi CMS 2.1.1 is affected by a Server-side request forgery (SSRF) vulnerability. When the user modifies the HTTP Referer header to any url, the server can make a request to it.
Пакеты
Наименование
feehi/cms
composer
Затронутые версииВерсия исправления
<= 2.1.1
Отсутствует
Связанные уязвимости
CVSS3: 9.1
nvd
больше 4 лет назад
Feehi CMS 2.1.1 is affected by a Server-side request forgery (SSRF) vulnerability. When the user modifies the HTTP Referer header to any url, the server can make a request to it.