| Package | Affected versions | Patched versions |
|---|---|---|
| simple machine forum | < 2.0.17 | 2.0.17 |
An issue was discovered in Simple Machines Forum (SMF) before release 2.0.17. There is SSRF related to Subs-Package.php and Subs.php because user-supplied data is used directly in curl calls.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free