Lucene search
MitreCVE-2022-38931HistorySep 20, 2022 - 8:15 p.m.
CVE-2022-38931
2022-09-2020:15:10
CWE-918
mitre
web.nvd.nist.gov
26
4
cve
2022
38931
ssrf
server-side request forgery
baijiacmsv4
nvd
security vulnerability
remote code execution
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.8
Confidence
High
EPSS
0.002
Percentile
54.5%
A Server-Side Request Forgery (SSRF) in fetch_net_file_upload function of baijiacmsV4 v4.1.4 allows remote attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the url parameter.
Affected configurations
Node
baijiacms_projectbaijiacmsMatch4.1.4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| baijiacms_project | baijiacms | 4.1.4 | cpe:2.3:a:baijiacms_project:baijiacms:4.1.4:*:*:*:*:*:*:* |
Social References
More
Related
prion
prion
Server side request forgery (ssrf)
2022-09-20 20:15:00
nvd
nvd
CVE-2022-38931
2022-09-20 20:15:10
osv
osv
CVE-2022-38931
2022-09-20 20:15:10
cvelist
cvelist
CVE-2022-38931
2022-09-20 19:58:59
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.8
Confidence
High
EPSS
0.002
Percentile
54.5%
Related for CVE-2022-38931