exploitDog

CVE-2023-45966

Опубликовано: 23 окт. 2023

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

umputun remark42 version 1.12.1 and before has a Blind Server-Side Request Forgery (SSRF) vulnerability.

Ссылки

https://github.com/jet-pentest/CVE-2023-45966
Third Party Advisory
https://github.com/umputun/remark42/issues/1677
Exploit
Issue Tracking
Third Party Advisory
https://github.com/jet-pentest/CVE-2023-45966
Third Party Advisory
https://github.com/umputun/remark42/issues/1677
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:remark42:remark42:*:*:*:*:*:*:*:*

Версия до 1.12.1 (включая)

EPSS

Процентиль: 51%

0.00276

Низкий

7.5 High

CVSS3

Дефекты

CWE-918

CWE-918

Связанные уязвимости

GHSA-r7w5-7g5j-xmxj

CVSS3: 7.5

github

больше 2 лет назад

umputun remark42 version 1.12.1 and before has a Blind Server-Side Request Forgery (SSRF) vulnerability.

EPSS

Процентиль: 51%

0.00276

Низкий

7.5 High

CVSS3

Дефекты

CWE-918

CWE-918