Gleez Cms Server Side Request Forgery (SSRF) vulnerability

严重 9.4CVE-2021-27312 · GHSA-7mxg-r76p-363g · Published 03/04/2024 · updated 17/06/2026

要点

CVE-2021-27312 是影响 gleez/cms, gleez cms (gleezcms) 的严重 (CVSS 9.4)漏洞。
未来 30 天内被利用的概率（EPSS）：1.0%，高于 63.9% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
gleez/cms Packagist	`≤ 1.2.0`	No fix yet
gleez cms gleezcms	`= 1.2.0`	No fix yet

Description

Server Side Request Forgery (SSRF) vulnerability in Gleez Cms 1.2.0, allows remote attackers to execute arbitrary code and obtain sensitive information via modules/gleez/classes/request.php.

NVD description

Server Side Request Forgery (SSRF) vulnerability in Gleez Cms 1.2.0, allows remote attackers to execute arbitrary code and obtain sensitive information via modules/gleez/classes/request.php.

References

nvd.nist.gov/vuln/detail/CVE-2021-27312 · ADVISORY
gleez/cms · WEB
gist.github.com/LioTree/8d10d123d31f50db05a25586e62a87ba · WEB
gleez/cms · PACKAGE

gleez/cms 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

gleez/cms

Packagist

≤ 1.2.0

No fix yet

gleez cms

gleezcms

= 1.2.0

No fix yet

Description

Server Side Request Forgery (SSRF) vulnerability in Gleez Cms 1.2.0, allows remote attackers to execute arbitrary code and obtain sensitive information via modules/gleez/classes/request.php.

NVD description

Server Side Request Forgery (SSRF) vulnerability in Gleez Cms 1.2.0, allows remote attackers to execute arbitrary code and obtain sensitive information via modules/gleez/classes/request.php.

gleez/cms 的其他漏洞

查看全部 →