Lucene search
Asesidaa655C4F77-04B2-4220-BFAF-A4D99FE86703HistorySep 04, 2023 - 9:11 a.m.
Incomplete fix for SSRF in CVE-2023-4651
2023-09-0409:11:12
asesidaa
www.huntr.dev
14
ssrf
incomplete fix
cve-2023-4651
image upload
bug bounty
0.0004 Low
EPSS
Percentile
14.2%
Description
The fix (commit a6bf758de0b3242b0c0e4b47a588aae0c94305b0) for CVE-2023-4651 is not complete. Only ip based URLs are blocked.
Proof of Concept
Clone the latest repo and install.
On server, listen for 1234 on localhost.
Use http://localhost:1234/ as URL for image upload.
Observe a hit on port 1234.
Related
prion
prion
Server side request forgery (ssrf)
2023-08-31 01:15:00
Server side request forgery (ssrf)
2023-09-10 18:15:00
osv
osv
CVE-2023-4651
2023-08-31 01:15:09
CVE-2023-4878
2023-09-10 18:15:07
nvd
nvd
CVE-2023-4651
2023-08-31 01:15:09
CVE-2023-4878
2023-09-10 18:15:07
cve
cve
CVE-2023-4651
2023-08-31 01:15:09
CVE-2023-4878
2023-09-10 18:15:07
huntr
huntr
SSRF Blind in the image upload module via url
2023-08-10 18:38:33
cvelist
cvelist
CVE-2023-4651 Server-Side Request Forgery (SSRF) in instantsoft/icms2
2023-08-31 00:00:19
CVE-2023-4878 Server-Side Request Forgery (SSRF) in instantsoft/icms2
2023-09-10 17:49:08