Lucene search
K

10 matches found

Cvelist
Cvelist
added 2026/06/06 4:30 p.m.37 views

CVE-2026-11437 perfree go-fastdfs-web Installation Endpoint checkServer server-side request forgery

A flaw has been found in perfree go-fastdfs-web up to 1.3.7. Affected is the function checkServer of the file /install/checkServer of the component Installation Endpoint. Executing a manipulation can lead to server-side request forgery. The attack can be executed remotely. The exploit has been...

7.5CVSS0.00409EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/06/06 4:30 p.m.8 views

CVE-2026-11437 perfree go-fastdfs-web Installation Endpoint checkServer server-side request forgery

A flaw has been found in perfree go-fastdfs-web up to 1.3.7. Affected is the function checkServer of the file /install/checkServer of the component Installation Endpoint. Executing a manipulation can lead to server-side request forgery. The attack can be executed remotely. The exploit has been...

7.5CVSS6.7AI score0.00409EPSS
Exploits0References5
CVE
CVE
added 2026/06/06 4:30 p.m.27 views

CVE-2026-11437

The CVE-2026-11437 entry describes a server-side request forgery in perfree go-fastdfs-web (up to version 1.3.7). The vulnerability affects the Installation Endpoint, specifically the function checkServer in /install/checkServer. An attacker can remotely trigger SSRF by manipulating inputs, with ...

7.5CVSS6.7AI score0.00409EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/06/06 12:0 a.m.7 views

go-fastdfs-web 代码问题漏洞

go-fastdfs-web is a web management platform for a distributed file storage system developed by Perfree’s individual developers. Versions of go-fastdfs-web prior to 1.3.7 have code vulnerabilities; these vulnerabilities stem from issues with the checkServer function in the Installation Endpoint...

7.5CVSS7.5AI score0.00409EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/06/06 12:0 a.m.11 views

PT-2026-47159

Name of the Vulnerable Software and Affected Versions perfree go-fastdfs-web versions prior to 1.3.8 Description A flaw in the Installation Endpoint allows for remote server-side request forgery SSRF, which occurs when an attacker can induce the server-side application to make requests to an...

7.5CVSS7.3AI score0.00409EPSS
Exploits0References9
OSV
OSV
added 2024/05/03 3:15 a.m.3 views

CVE-2023-40511

LG Simple Editor checkServer Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the checkServer method...

7.5CVSS5.9AI score0.01267EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2024/05/03 3:15 a.m.2 views

CVE-2023-40511

LG Simple Editor checkServer Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the checkServer method...

7.5CVSS7.2AI score0.01267EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/05/03 2:11 a.m.13 views

CVE-2023-40511 LG Simple Editor checkServer Authentication Bypass Vulnerability

LG Simple Editor checkServer Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the checkServer method...

7.5CVSS7.7AI score0.01267EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/05/03 12:0 a.m.5 views

LG Simple Editor 安全漏洞

LG Simple Editor is a simple editor from Luckin LG Korea. Create new content by simplifying the process and instant playback on signage. A security vulnerability exists in LG Simple Editor that stems from an authentication bypass vulnerability in the checkServer method...

7.5CVSS7.8AI score0.01267EPSS
Exploits0References2
Zero Day Initiative
Zero Day Initiative
added 2023/08/24 12:0 a.m.16 views

(0Day) LG Simple Editor checkServer Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the checkServer method. The issue results from the exposure of plaintext credentials. An...

7.5CVSS6.9AI score0.01267EPSS
Exploits0
Rows per page
Query Builder