CVE-2022-31386

2022-06-0913:34:50

mitre

www.cve.org

ssrf

getfilebinary function

nbnbk cms 3

arbitrary requests

AI Score

9.6

Confidence

High

EPSS

0.002

Percentile

59.1%

JSON

A Server-Side Request Forgery (SSRF) in the getFileBinary function of nbnbk cms 3 allows attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the URL parameter.

References

github.com/Fanli2012/nbnbk/issues/5