Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jfwq-pfcr-9f47

Опубликовано: 21 сент. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

A Server-Side Request Forgery (SSRF) in fetch_net_file_upload function of baijiacmsV4 v4.1.4 allows remote attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the url parameter.

A Server-Side Request Forgery (SSRF) in fetch_net_file_upload function of baijiacmsV4 v4.1.4 allows remote attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the url parameter.

EPSS

Процентиль: 71%
0.00671
Низкий

8.8 High

CVSS3

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 8.8
nvd
больше 3 лет назад

A Server-Side Request Forgery (SSRF) in fetch_net_file_upload function of baijiacmsV4 v4.1.4 allows remote attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the url parameter.

EPSS

Процентиль: 71%
0.00671
Низкий

8.8 High

CVSS3

Дефекты

CWE-918