Lucene search
+L

CVE-2020-24139

🗓️ 07 Apr 2021 15:03:05Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 65 Views🌐 WEB

Server-side request forgery in Wcms 0.3.2 allows crafted requests to wex/cssjs.ph

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
cnnvd
CNNVD
Wcms 代码问题漏洞
7 Apr 202100:00
–cnnvd
cnvd
CNVD
WCMS Server-Side Request Forgery Vulnerability
8 Apr 202100:00
–cnvd
cvelist
Cvelist
CVE-2020-24139
7 Apr 202115:03
–cvelist
euvd
EUVD
EUVD-2020-16875
7 Oct 202500:30
–euvd
mend
Mend
CVE-2020-24139
7 Apr 202115:03
–mend
nvd
NVD
CVE-2020-24139
7 Apr 202116:15
–nvd
prion
Prion
Server side request forgery (ssrf)
7 Apr 202116:15
–prion
ptsecurity
Positive Technologies
PT-2021-11010
7 Apr 202100:00
–ptsecurity
rapid7
Rapid7 Vulnerability Database (full)
CVE-2020-24139: Server-Side Request Forgery (SSRF)
7 Apr 202100:00
–rapid7
redhatcve
RedhatCVE
CVE-2020-24139
22 May 202516:31
–redhatcve
NVD
Node
wcmswcmsMatch0.3.2
ParameterPositionPathDescriptionCWE
pathpath/wex/cssjs.phpSSRF via the path parameter to /wex/cssjs.php on Wcms 0.3.2; allows the back-end server to access internal resources, identify open ports/hosts, and execute commands on local services.CWE-918

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 03:05Current
8.2High risk
Vulners AI Score8.2
CVSS 27.5
CVSS 3.18.3
EPSS0.01051
65