Server-Side Request Forgery in Feehi CMS

严重 9.1CVE-2021-30108 · GHSA-gc45-j3m5-8qfq · Published 24/05/2021 · updated 17/06/2026

要点

CVE-2021-30108 是影响 feehi/cms, feehi cms (feehi) 的严重 (CVSS 9.1)漏洞。
未来 30 天内被利用的概率（EPSS）：1.1%，高于 65.9% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
feehi/cms Packagist	`≤ 2.1.1`	No fix yet
feehi cms feehi	`= 2.1.1`	No fix yet

Description

Feehi CMS 2.1.1 is affected by a Server-side request forgery (SSRF) vulnerability. When the user modifies the HTTP Referer header to any url, the server can make a request to it.

NVD description

Feehi CMS 2.1.1 is affected by a Server-side request forgery (SSRF) vulnerability. When the user modifies the HTTP Referer header to any url, the server can make a request to it.

References

nvd.nist.gov/vuln/detail/CVE-2021-30108 · ADVISORY
liufee/cms · WEB
liufee/cms · WEB
liufee/cms commit d45cb9c · WEB

feehi/cms 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

feehi/cms

Packagist

≤ 2.1.1

No fix yet

feehi cms

feehi

= 2.1.1

No fix yet

Description

Feehi CMS 2.1.1 is affected by a Server-side request forgery (SSRF) vulnerability. When the user modifies the HTTP Referer header to any url, the server can make a request to it.

NVD description

Feehi CMS 2.1.1 is affected by a Server-side request forgery (SSRF) vulnerability. When the user modifies the HTTP Referer header to any url, the server can make a request to it.

feehi/cms 的其他漏洞

查看全部 →