Lucene search
+L

61 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 4:04 a.m.•13 views

CVE-2023-3744

Server-Side Request Forgery vulnerability in SLims version 9.6.0. This vulnerability could allow an authenticated attacker to send requests to internal services or upload the contents of relevant files via the "scrapeimage.php" file in the imageURL parameter...

9.9CVSS6.8AI score0.00459EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/23 3:41 a.m.•15 views

CVE-2023-30019

imgproxy =3.14.0 is vulnerable to Server-Side Request Forgery SSRF due to a lack of sanitization of the imageURL parameter...

5.3CVSS6.8AI score0.02214EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 2:49 a.m.•16 views

CVE-2023-6307

A vulnerability classified as critical was found in jeecgboot JimuReport up to 1.6.1. Affected by this vulnerability is an unknown functionality of the file /download/image. The manipulation of the argument imageUrl leads to relative path traversal. The attack can be launched remotely. The exploi...

9.8CVSS6.8AI score0.0084EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 3:24 p.m.•10 views

CVE-2020-26948

Emby Server before 4.5.0 allows SSRF via the Items/RemoteSearch/Image ImageURL parameter...

9.8CVSS6.8AI score0.87154EPSS
SaveExploits4
Positive Technologies
Positive Technologies
•added 2023/11/27 12:00 a.m.•16 views

PT-2023-32607 · Unknown · Jeecgboot Jimureport

Name of the Vulnerable Software and Affected Versions: jeecgboot JimuReport versions up to 1.6.1 Description: A critical vulnerability was found in jeecgboot JimuReport, affecting an unknown functionality of the file /download/image. The manipulation of the imageUrl argument leads to relative pat...

9.8CVSS6.6AI score0.0084EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/27 12:00 a.m.•1 views

CVE-2023-6307: Relative Path Traversal

A vulnerability classified as critical was found in jeecgboot JimuReport up to 1.6.1. Affected by this vulnerability is an unknown functionality of the file /download/image. The manipulation of the argument imageUrl leads to relative path traversal. The attack can be launched remotely. The exploi...

9.8CVSS6.3AI score0.0084EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/11/27 12:00 a.m.•15 views

JeecgBoot JimuReport Security Vulnerability

JeecgBoot is a Chinese Java low-code platform for enterprise web applications. A security vulnerability exists in JeecgBoot JimuReport version 1.6.1 and prior versions, which stems from an incorrect manipulation of the parameter imageUrl that can lead to relative path traversal...

9.8CVSS6.7AI score0.0084EPSS
SaveExploits0References3
NVD
NVD
•added 2023/10/02 2:15 p.m.•31 views

CVE-2023-3744

Server-Side Request Forgery vulnerability in SLims version 9.6.0. This vulnerability could allow an authenticated attacker to send requests to internal services or upload the contents of relevant files via the "scrapeimage.php" file in the imageURL parameter...

9.9CVSS9.4AI score0.00459EPSS
SaveExploits0References1
Prion
Prion
•added 2023/10/02 2:15 p.m.•35 views

Server side request forgery (ssrf)

Server-Side Request Forgery vulnerability in SLims version 9.6.0. This vulnerability could allow an authenticated attacker to send requests to internal services or upload the contents of relevant files via the "scrapeimage.php" file in the imageURL parameter...

6.5CVSS8.5AI score0.00459EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2023/10/02 1:50 p.m.•21 views

CVE-2023-3744 Server-Side Request Forgery in SLiMS

Server-Side Request Forgery vulnerability in SLims version 9.6.0. This vulnerability could allow an authenticated attacker to send requests to internal services or upload the contents of relevant files via the "scrapeimage.php" file in the imageURL parameter...

9.9CVSS7.2AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2023/10/02 1:50 p.m.•34 views

CVE-2023-3744 Server-Side Request Forgery in SLiMS

Server-Side Request Forgery vulnerability in SLims version 9.6.0. This vulnerability could allow an authenticated attacker to send requests to internal services or upload the contents of relevant files via the "scrapeimage.php" file in the imageURL parameter...

9.9CVSS6.8AI score0.00459EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/02 12:00 a.m.•0 views

CVE-2023-3744: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery vulnerability in SLims version 9.6.0. This vulnerability could allow an authenticated attacker to send requests to internal services or upload the contents of relevant files via the "scrapeimage.php" file in the imageURL parameter...

9.9CVSS7.8AI score0.00459EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/10/02 12:00 a.m.•13 views

SLims Code Issue Vulnerability

Slims9 Bulian is a free and open source software from the Indonesian Slims community. It is used for library resource management e.g. books, journals, digital files and other library materials and administration. A code issue vulnerability exists in SLims version 9.6.0, which stems from a...

9.9CVSS7.1AI score0.00459EPSS
SaveExploits0References2
Veracode
Veracode
•added 2023/05/11 4:24 a.m.•32 views

Server-side Request Forgery (SSRF)

github.com/imgproxy/imgproxy is vulnerable to Server-Side Request Forgery SSRF. The vulnerability exists due to unsafe sanitation of the imageURL parameter, which allows an attacker to cause server-side request forgery...

5.3CVSS6.4AI score0.02214EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2023/05/08 3:30 p.m.•100 views

GHSA-9X7H-GGC3-XG47 imgproxy is vulnerable to Server-Side Request Forgery

imgproxy prior to version 3.15.0 is vulnerable to Server-Side Request Forgery SSRF due to a lack of sanitization of the imageURL parameter...

5.3CVSS5.1AI score0.02214EPSS
SaveExploits1References5
NVD
NVD
•added 2023/05/08 3:15 p.m.•44 views

CVE-2023-30019

imgproxy =3.14.0 is vulnerable to Server-Side Request Forgery SSRF due to a lack of sanitization of the imageURL parameter...

5.3CVSS5.2AI score0.02214EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/05/08 12:00 a.m.•53 views

CVE-2023-30019

imgproxy =3.14.0 is vulnerable to Server-Side Request Forgery SSRF due to a lack of sanitization of the imageURL parameter...

5.5AI score0.02214EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/08 12:00 a.m.•1 views

CVE-2023-30019: Server-Side Request Forgery (SSRF)

imgproxy =3.14.0 is vulnerable to Server-Side Request Forgery SSRF due to a lack of sanitization of the imageURL parameter...

5.3CVSS5.8AI score0.02214EPSS
SaveExploits1References3
OSV
OSV
•added 2023/05/08 12:00 a.m.•34 views

CVE-2023-30019

imgproxy =3.14.0 is vulnerable to Server-Side Request Forgery SSRF due to a lack of sanitization of the imageURL parameter...

5.3CVSS7.1AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2023/05/08 12:00 a.m.•9 views

CVE-2023-30019

imgproxy =3.14.0 is vulnerable to Server-Side Request Forgery SSRF due to a lack of sanitization of the imageURL parameter...

5.2AI score0.02214EPSS
SaveExploits1References2
Rows per page
Query Builder