Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-62366
HistorySep 06, 2022 - 12:00 a.m.

PublicCMS server-side request forgery vulnerability

2022-09-0600:00:00
China National Vulnerability Database
www.cnvd.org.cn
14
publiccms
java
china
vulnerability
server-side
request forgery
file parameter
ip
domain name
restricted
attacker
probe
intranet
resources
cnvd

0.002 Low

EPSS

Percentile

57.2%

PublicCMS is an open source content management system (CMS) written in Java by PublicCMS, China. publicCMS 4.0.202011.b previous versions exist server-side request forgery vulnerability, the vulnerability stems from the file parameter for access to the IP and domain name is not restricted. An attacker can use this vulnerability to probe the server intranet resources.

0.002 Low

EPSS

Percentile

57.2%

Related for CNVD-2022-62366