Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/15 12:00 a.m.•4 views

CVE-2025-0480: Server-Side Request Forgery (SSRF)

A vulnerability classified as problematic has been found in wuzhicms 4.1.0. This affects the function test of the file coreframe/app/search/admin/config.php. The manipulation of the argument sphinxhost/sphinxport leads to server-side request forgery. It is possible to initiate the attack remotely...

5.3CVSS5.4AI score0.00496EPSS
SaveExploits1References1
Rows per page
Query Builder