4 matches found
CVE-2018-20528
JEECMS 9 has SSRF via the ueditor/getRemoteImage.jspx upfile parameter...
6.5CVSS6.5AI score0.01047EPSS
SaveExploits0References2
Design/Logic Flaw
JEECMS 9 has SSRF via the ueditor/getRemoteImage.jspx upfile parameter...
4CVSS6.5AI score0.01047EPSS
SaveExploits0References2Affected Software1
CVE-2018-20528: Server-Side Request Forgery (SSRF)
JEECMS 9 has SSRF via the ueditor/getRemoteImage.jspx upfile parameter...
6.5CVSS5.8AI score0.01047EPSS
SaveExploits0References2
PT-2018-15414
Name of the Vulnerable Software and Affected Versions JEECMS version 9 Description The issue concerns a Server-Side Request Forgery SSRF vulnerability. It is related to the upfile parameter in the /ueditor/getRemoteImage.jspx API endpoint. This allows for potential unauthorized access and...
6.5CVSS0.01047EPSS
SaveExploits0References4
20