CVE-2017-12905

2017-09-2517:00:00

mitre

www.cve.org

9.6 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.3%

JSON

Server Side Request Forgery vulnerability in Vebto Pixie Image Editor 1.4 and 1.7 allows remote attackers to disclose information or execute arbitrary code via the url parameter to Launderer.php.

References

seclists.org/fulldisclosure/2017/Sep/47