Lucene search
Veracode Vulnerability DatabaseVERACODE:40154HistoryApr 18, 2023 - 10:51 a.m.
Server-Side Request Forgery (SSRF)
2023-04-1810:51:58
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
ssrf bypass
remote function
crafted url
server-side request forgery
0.001 Low
EPSS
Percentile
49.4%
yuan1994/tpadmin is vulnerable to Server-Side Request Forgery. The vulnerability exists because the library does not properly validate the remote function in Upload.php which allows a remote attacker to cause an SSRF bypass via a crafted url.
| CPE | Name | Operator | Version |
|---|---|---|---|
| yuan1994/tpadmin | le | v1.3.12 | |
| yuan1994/tpadmin | le | v1.3.12 |
Related
cve
cve
CVE-2023-1971
2023-04-10 17:15:06
github
github
yuan1994 tpAdmin vulnerable to Server-Side Request Forgery
2023-04-10 18:30:22
osv
osv
yuan1994 tpAdmin vulnerable to Server-Side Request Forgery
2023-04-10 18:30:22
cvelist
cvelist
CVE-2023-1971 yuan1994 tpAdmin Upload.php remote server-side request forgery
2023-04-10 16:31:03
nvd
nvd
CVE-2023-1971
2023-04-10 17:15:06
prion
prion
Server side request forgery (ssrf)
2023-04-10 17:15:00