FlatCore CMS Server-Side Request Forgery (CVE-2021-41403)

A server-side request forgery vulnerability exists in FlatCore CMS. Successful exploitation of this vulnerability could allow an attacker to access internal resources...

CVE-2021-41403

flatCore-CMS version 2.0.8 calls dangerous functions, causing server-side request forgery vulnerabilities...

CVE-2021-41403

CVE-2021-41403 affects flatCore-CMS 2.0.8, where a call to a dangerous function enables server-side request forgery (SSRF). Multiple connected sources corroborate SSRF risk in flatCore-CMS 2.0.8, with the NVD listing high/critical impact across CVSS 2.0 and 3.1 metrics. The root cause is describe...