CVE-2023-45966

CVE-2023-45966 umputun/remark42 的 POST 请求中的恶意 JSON 导致了 Blind SSRF。 附加信息 修复于提交：efceed6 漏洞类型其他 CWE-918：服务器端请求伪造 产品供应商 https://github.com/umputun 受影响产品代码库 受影响版本：umputun/remark42 = 1.12.1 受影响组件 /api/v1/comment 攻击类型 远程 影响代码执行 false 影响拒绝服务 false 影响特权提升 false 影响信息泄露 true 攻击向量 攻击者能够发送特制的 JSON 发现者 Dmitry...

CVE-2023-45966

umputun remark42 version 1.12.1 and before has a Blind Server-Side Request Forgery SSRF vulnerability...

CVE-2023-45966

umputun remark42 version 1.12.1 and before has a Blind Server-Side Request Forgery SSRF vulnerability...

CVE-2023-45966

umputun remark42 version 1.12.1 and before has a Blind Server-Side Request Forgery SSRF vulnerability...

Server side request forgery (ssrf)

umputun remark42 version 1.12.1 and before has a Blind Server-Side Request Forgery SSRF vulnerability...

CVE-2023-45966

umputun remark42 version 1.12.1 and before has a Blind Server-Side Request Forgery SSRF vulnerability...

CVE-2023-45966

umputun remark42 version 1.12.1 and before has a Blind Server-Side Request Forgery SSRF vulnerability...

CVE-2023-45966

The CVE-2023-45966 entry concerns umputun remark42 (versions 1.12.1 and earlier) with a Blind Server-Side Request Forgery (SSRF) vulnerability. Affected component: remark42; root cause is SSRF that is not fully exposed in the provided details. Impact per CVSS indicates high confidentiality impact...

CVE-2023-45966

umputun remark42 version 1.12.1 and before has a Blind Server-Side Request Forgery SSRF vulnerability...

PT-2023-29777 · Umputun · Remark42

Name of the Vulnerable Software and Affected Versions: umputun remark42 versions 1.12.1 and before Description: The issue is related to a Blind Server-Side Request Forgery SSRF vulnerability. No information is provided about the estimated number of potentially affected devices worldwide or...