Server side request forgery (ssrf)

2023-05-2709:15:00

PRIOn knowledge base

www.prio-n.com

server side request forgery

jizhicms 2.4.5

critical

templatecontroller.php

vulnerability

remote attack

public exploit

vdb-230082

nvd

9.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.3%

JSON

A vulnerability was found in JIZHICMS 2.4.5. It has been classified as critical. Affected is the function index of the file TemplateController.php. The manipulation of the argument webapi leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-230082 is the identifier assigned to this vulnerability.