Lucene search
MitreCVELIST:CVE-2018-15895HistoryAug 27, 2018 - 4:00 a.m.
CVE-2018-15895
2018-08-2704:00:00
mitre
www.cve.org
3
EPSS
0.006
Percentile
78.3%
An SSRF vulnerability was discovered in idreamsoft iCMS 7.0.11 because the remote function in app/spider/spider_tools.class.php does not block DNS hostnames associated with private and reserved IP addresses, as demonstrated by 127.0.0.1 in an A record. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-14858.
References
Related
nvd
nvd
CVE-2018-15895
2018-08-27 04:29:00
CVE-2018-14858
2018-08-02 20:29:00
prion
prion
Server side request forgery (ssrf)
2018-08-27 04:29:00
Server side request forgery (ssrf)
2018-08-02 20:29:00
cve
cve
CVE-2018-15895
2018-08-27 04:29:00
CVE-2018-14858
2018-08-02 20:29:00
cvelist
cvelist
CVE-2018-14858
2018-08-02 20:00:00