CVE-2021-25972 Camaleon CMS - Server-Side Request Forgery (SSRF) in Media Upload Feature

2021-10-2011:55:19

CWE-918

Mend

www.cve.org

cve-2021-25972

camaleon cms

ssrf

media upload

external urls

admin users

internal servers

CVSS3

4.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

27.0%

JSON

In Camaleon CMS, versions 2.1.2.0 to 2.6.0, are vulnerable to Server-Side Request Forgery (SSRF) in the media upload feature, which allows admin users to fetch media files from external URLs but fails to validate URLs referencing to localhost or other internal servers. This allows attackers to read files stored in the internal server.

CNA Affected

[
  {
    "product": "camaleon_cms",
    "vendor": "camaleon_cms",
    "versions": [
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "2.1.2.0",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "2.6.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]