Eyoucms Server Side Request Forgery (CVE-2021-39497)

A sever-side request forgery vulnerability exists in Eyoucms. The vulnerability is due to a lack of validation on the subdomain parameter in HTTP requests. Successful exploitation of this vulnerability could allow an unauthenticated attacker to make a request to any internal and external server...

CVE-2021-39497

The CVE-2021-39497 entry concerns EyouCMS 1.5.4 where input data is not properly sanitized, allowing an attacker to inject a URL to trigger a blind server-side request forgery (SSRF) via the saveRemote() function. Root cause: lack of validation on input data leading to SSRF. Documented in multipl...