Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hxh5-f5fj-62c3

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.2

Описание

A Server Side Request Forgery (SSRF) vulnerability in tools/files/importers/remote.php in concrete5 8.2.0 can lead to attacks on the local network and mapping of the internal network, because of URL functionality on the File Manager page.

A Server Side Request Forgery (SSRF) vulnerability in tools/files/importers/remote.php in concrete5 8.2.0 can lead to attacks on the local network and mapping of the internal network, because of URL functionality on the File Manager page.

EPSS

Процентиль: 56%
0.00335
Низкий

7.2 High

CVSS3

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 7.2
nvd
больше 7 лет назад

A Server Side Request Forgery (SSRF) vulnerability in tools/files/importers/remote.php in concrete5 8.2.0 can lead to attacks on the local network and mapping of the internal network, because of URL functionality on the File Manager page.

EPSS

Процентиль: 56%
0.00335
Низкий

7.2 High

CVSS3

Дефекты

CWE-918