Описание
A Server-Side Request Forgery (SSRF) in the installUpdateThemePluginAction function of WonderCMS v3.1.3 allows attackers to force the application to make arbitrary requests via injection of crafted URLs into the installThemePlugin parameter.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:wondercms:wondercms:3.1.3:*:*:*:*:*:*:*
EPSS
Процентиль: 41%
0.00193
Низкий
8.1 High
CVSS3
9.1 Critical
CVSS3
Дефекты
CWE-918
CWE-918
Связанные уязвимости
CVSS3: 9.1
github
почти 2 года назад
A Server-Side Request Forgery (SSRF) in the installUpdateThemePluginAction function of WonderCMS v3.1.3 allows attackers to force the application to make arbitrary requests via injection of crafted URLs into the installThemePlugin parameter.
EPSS
Процентиль: 41%
0.00193
Низкий
8.1 High
CVSS3
9.1 Critical
CVSS3
Дефекты
CWE-918
CWE-918