Server-Side Request Forgery in Feehi CMS

2021-06-0820:12:32

Google

osv.dev

0.003 Low

EPSS

Percentile

70.0%

JSON

Feehi CMS 2.1.1 is affected by a Server-side request forgery (SSRF) vulnerability. When the user modifies the HTTP Referer header to any url, the server can make a request to it.

CPENameOperatorVersion
feehi/cmseq2.0.5.1
feehi/cmseq0.0.8
feehi/cmseq2.0.2
feehi/cmseq2.0.5
feehi/cmseq0.1.0
feehi/cmseq0.0.1
feehi/cmseq0.0.5
feehi/cmseq2.1.0.2
feehi/cmseq0.0.4
feehi/cmseq1.0.0alpha1

Name	Operator	Version
feehi/cms	eq	2.0.5.1
feehi/cms	eq	0.0.8
feehi/cms	eq	2.0.2
feehi/cms	eq	2.0.5
feehi/cms	eq	0.1.0
feehi/cms	eq	0.0.1
feehi/cms	eq	0.0.5
feehi/cms	eq	2.1.0.2
feehi/cms	eq	0.0.4
feehi/cms	eq	1.0.0alpha1