5 matches found
CVE-2026-36469
CuteNews v.2.1.2 is vulnerable to Server-Side Request Forgery SSRF in core/modules/media.php -- uploadfrominet Media Manager's "Upload by URL" functionality...
EUVD-2026-83991
CuteNews v.2.1.2 is vulnerable to Server-Side Request Forgery SSRF in core/modules/media.php -- uploadfrominet Media Manager's "Upload by URL" functionality...
CVE-2026-36469: Server-Side Request Forgery (SSRF)
CuteNews v.2.1.2 is vulnerable to Server-Side Request Forgery SSRF in core/modules/media.php -- uploadfrominet Media Manager's "Upload by URL" functionality...
CVE-2026-36469
CuteNews v.2.1.2 is vulnerable to Server-Side Request Forgery (SSRF) within the core/modules/media.php file. The flaw exists in the upload_from_inet function, which powers the Media Manager's "Upload by URL" functionality. This vulnerability allows an attacker to trigger requests from the server ...
