Lucene search
HistorySep 20, 2022 - 8:15 p.m.
CVE-2022-38931
ssrf
remote attackers
arbitrary requests
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
54.5%
A Server-Side Request Forgery (SSRF) in fetch_net_file_upload function of baijiacmsV4 v4.1.4 allows remote attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the url parameter.
Affected configurations
Node
baijiacms_projectbaijiacmsMatch4.1.4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| baijiacms_project | baijiacms | 4.1.4 | cpe:2.3:a:baijiacms_project:baijiacms:4.1.4:*:*:*:*:*:*:* |
Related
prion
prion
Server side request forgery (ssrf)
2022-09-20 20:15:00
osv
osv
CVE-2022-38931
2022-09-20 20:15:10
cvelist
cvelist
CVE-2022-38931
2022-09-20 19:58:59
cve
cve
CVE-2022-38931
2022-09-20 20:15:10
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
54.5%
Related for NVD:CVE-2022-38931