CVE-2021-40604

CRITICAL 9.1CVE-2021-40604 · Published 13/06/2022 · updated 17/06/2026

In short

CVE-2021-40604 is a CRITICAL (CVSS 9.1) vulnerability affecting ips community suite (invisioncommunity).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 69.2% of all vulnerabilities.
Fix: update to 4.6.2 or later.

Package	Affected versions	Patched versions
ips community suite invisioncommunity	`< 4.6.2`	`4.6.2`

Description

A Server-Side Request Forgery (SSRF) vulnerability in IPS Community Suite before 4.6.2 allows remote authenticated users to request arbitrary URLs or trigger deserialization via phar protocol when generating class names dynamically. In some cases an exploitation is possible by an unauthenticated user.

References

invisioncommunity.com/release-notes/462-r99 · Release Notes

More vulnerabilities in ips community suite

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free