Unrated

A Server Side Request Forgery (SSRF) vulnerability in tools/files/importers/remote.php in concrete5 8.2.0 can lead to attacks on the local network and...

CVE-2018-13790 First seen on SecPulse Jul 10, 2018

Original description The description as published by the source.

A Server Side Request Forgery (SSRF) vulnerability in tools/files/importers/remote.php in concrete5 8.2.0 can lead to attacks on the local network and mapping of the internal network, because of URL functionality on the File Manager page.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

report hackerone.com

Key facts

Severity: Unrated
Published: Jul 10, 2018
First seen on SecPulse: Jul 10, 2018

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:49