Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v5g3-mw88-c3jm

Опубликовано: 31 мар. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.2

Описание

forem up to v2022.11.11 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /articles/{id}. This vulnerability allows attackers to access network resources and sensitive information via a crafted POST request.

forem up to v2022.11.11 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /articles/{id}. This vulnerability allows attackers to access network resources and sensitive information via a crafted POST request.

EPSS

Процентиль: 54%
0.00308
Низкий

7.2 High

CVSS3

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 7.2
nvd
почти 3 года назад

forem up to v2022.11.11 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /articles/{id}. This vulnerability allows attackers to access network resources and sensitive information via a crafted POST request.

EPSS

Процентиль: 54%
0.00308
Низкий

7.2 High

CVSS3

Дефекты

CWE-918