CVE-2022-38931

2022-09-2019:58:59

mitre

www.cve.org

server-side request forgery

baijiacmsv4

remote attackers

AI Score

9.1

Confidence

High

EPSS

0.002

Percentile

54.5%

JSON

A Server-Side Request Forgery (SSRF) in fetch_net_file_upload function of baijiacmsV4 v4.1.4 allows remote attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the url parameter.

References

github.com/zer0yu/CVE_Request/blob/master/baijiacms/baijiacmsv4_ssrf.md