CVE-2021-27693

Server-side Request Forgery SSRF vulnerability in PublicCMS before 4.0.202011.b via /publiccms/admin/ueditor when the action is catchimage...

CVE-2021-27693

creationtimestamp| type| source ---|---|--- 2022-09-02 22:39:31+00:00| seen| https://t.me/cibsecurity/49257...

CVE-2021-27693

PublicCMS is affected by a Server-side Request Forgery (SSRF) in the /publiccms/admin/ueditor endpoint when the action is catchimage, prior to version 4.0.202011.b. The vulnerability allows an attacker to access internal resources; NVD notes a critical CVSS v3.1 score (9.8, HIGHImpact on confiden...