Gleez Cms Server Side Request Forgery (SSRF) vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2021-27312 · ADVISORY
• gleez/cms · WEB
• gist.github.com/LioTree/8d10d123d31f50db05a25586e62a87ba · WEB
• gleez/cms · PACKAGE

gleez/cms のその他の脆弱性

• CVE-2018-16704中 4.3An issue was discovered in Gleez CMS v1.2.0. Because of an Insecure Direct Object Reference vulnerability, it is possible for attackers (log…
• CVE-2018-16347中 6.1An issue was discovered in Gleez CMS v1.2.0. There is XSS via media/imagecache/resize.
• CVE-2018-15845高 8.8There is a CSRF vulnerability that can add an administrator account in Gleez CMS 1.2.0 via admin/users/add.
• CVE-2018-1999021中 5.4Gleezcms Gleez Cms version 1.3.0 contains a Cross Site Scripting (XSS) vulnerability in Profile page that can result in Inject arbitrary web…
• CVE-2018-7035中 5.4Cross-site scripting (XSS) vulnerability in Gleez CMS 1.2.0 and 2.0 might allow remote attackers (users) to inject JavaScript via HTML conte…