Lucene search
+L

2 matches found

Veracode
Veracode
added 2021/11/24 9:51 a.m.30 views

Server-Side Request Forgery (SSRF)

concrete5/concrete5 is vulnerable to server-side request forgery. The vulnerability exists through the local IP importing in 'file.php' which allows an attacker to read the files from private local LAN servers and exploit the local network apps...

7.5CVSS3.7AI score0.01438EPSS
SaveExploits0References7Affected Software2
Rows per page
Query Builder