2 matches found
Server-Side Request Forgery (SSRF)
concrete5/concrete5 is vulnerable to server-side request forgery. The vulnerability exists through the local IP importing in 'file.php' which allows an attacker to read the files from private local LAN servers and exploit the local network apps...
7.5CVSS3.7AI score0.01438EPSS
SaveExploits0References7Affected Software2
20