Server side request forgery (ssrf)

2022-05-0414:15:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.3%

Jspxcms v10.2.0 allows attackers to execute a Server-Side Request Forgery (SSRF) via /cmscp/ext/collect/fetch_url.do?url=.

CPENameOperatorVersion
jspxcmseq10.2.0

CPE	Name	Operator	Version
	jspxcms	eq	10.2.0

References

gitee.com/jspxcms/Jspxcms/issues/I4ZKDR