Описание
A Server-Side Request Forgery (SSRF) in the getFileFromRepo function of WonderCMS v3.1.3 allows attackers to force the application to make arbitrary requests via injection of crafted URLs into the pluginThemeUrl parameter.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:wondercms:wondercms:3.1.3:*:*:*:*:*:*:*
EPSS
Процентиль: 35%
0.00145
Низкий
5.3 Medium
CVSS3
6.5 Medium
CVSS3
Дефекты
CWE-918
CWE-918
Связанные уязвимости
CVSS3: 6.5
github
почти 2 года назад
A Server-Side Request Forgery (SSRF) in the getFileFromRepo function of WonderCMS v3.1.3 allows attackers to force the application to make arbitrary requests via injection of crafted URLs into the pluginThemeUrl parameter.
EPSS
Процентиль: 35%
0.00145
Низкий
5.3 Medium
CVSS3
6.5 Medium
CVSS3
Дефекты
CWE-918
CWE-918