CVE-2022-25777
Server-Side Request Forgery in Asset section
概要
Server-Side Request Forgery in Asset section
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Prior to the patched version, an authenticated user of Mautic could read system files and access the internal addresses of the application due to a Server-Side Request Forgery (SSRF) vulnerability.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web packagist.org