CVE-2023-1046
MuYuCMS getFile.html server-side request forgery
概要
MuYuCMS getFile.html server-side request forgery
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A vulnerability classified as critical has been found in MuYuCMS 2.2. This affects an unknown part of the file /admin.php/update/getFile.html. The manipulation of the argument url leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-221805 was assigned to this vulnerability.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory vuldb.com
- report github.com
- report vuldb.com