Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pqmv-6w3c-fgq2

Опубликовано: 30 июл. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.1

Описание

A Server-Side Request Forgery (SSRF) in the Plugins Page of WonderCMS v3.4.3 allows attackers to force the application to make arbitrary requests via injection of crafted URLs into the pluginThemeUrl parameter.

A Server-Side Request Forgery (SSRF) in the Plugins Page of WonderCMS v3.4.3 allows attackers to force the application to make arbitrary requests via injection of crafted URLs into the pluginThemeUrl parameter.

EPSS

Процентиль: 25%
0.00086
Низкий

7.1 High

CVSS3

Дефекты

CWE-352
CWE-918

Связанные уязвимости

CVSS3: 4.7
nvd
больше 1 года назад

A Server-Side Request Forgery (SSRF) in the Plugins Page of WonderCMS v3.4.3 allows attackers to force the application to make arbitrary requests via injection of crafted URLs into the pluginThemeUrl parameter.

EPSS

Процентиль: 25%
0.00086
Низкий

7.1 High

CVSS3

Дефекты

CWE-352
CWE-918