CVE-2024-48232

An issue was found in mipjz 5.0.5. In the mipPost method of \app\setting\controller\ApiAdminTool.php, the value of the postAddress parameter is not processed and is directly passed into curlexec execution and output, resulting in a Server-side request forgery SSRF vulnerability that can read serv...

CVE-2024-48232

The mipjz content management system version 5.0.5 is vulnerable to a Server-side request forgery (SSRF) vulnerability. The root cause is located in the mipPost method of the app\{settingackslash controllerackslash ApiAdminTool.php file, where the postAddress parameter is not processed and is di...

CVE-2024-48232: Server-Side Request Forgery (SSRF)

An issue was found in mipjz 5.0.5. In the mipPost method of \app\setting\controller\ApiAdminTool.php, the value of the postAddress parameter is not processed and is directly passed into curlexec execution and output, resulting in a Server-side request forgery SSRF vulnerability that can read serv...