CVE-2017-12905

2017-09-2517:00:00

mitre

www.cve.org

AI Score

9.6

Confidence

High

EPSS

0.009

Percentile

82.3%

JSON

Server Side Request Forgery vulnerability in Vebto Pixie Image Editor 1.4 and 1.7 allows remote attackers to disclose information or execute arbitrary code via the url parameter to Launderer.php.

References

seclists.org/fulldisclosure/2017/Sep/47