3 matches found
Server side request forgery (ssrf)
An issue was discovered in Simple Machines Forum SMF before release 2.0.17. There is SSRF related to Subs-Package.php and Subs.php because user-supplied data is used directly in curl calls...
7.5CVSS9.3AI score0.0147EPSS
SaveExploits1References2Affected Software1
CVE-2019-11574
An issue was discovered in Simple Machines Forum SMF before release 2.0.17. There is SSRF related to Subs-Package.php and Subs.php because user-supplied data is used directly in curl calls...
9.5AI score0.0147EPSS
SaveExploits1References2
CVE-2019-11574: Server-Side Request Forgery (SSRF)
An issue was discovered in Simple Machines Forum SMF before release 2.0.17. There is SSRF related to Subs-Package.php and Subs.php because user-supplied data is used directly in curl calls...
9.8CVSS8.3AI score0.0147EPSS
SaveExploits1References2
20