~ / search / GHSA-7mxg-r76p-363g

GHSA-7mxg-r76p-363g

Gleez Cms Server Side Request Forgery (SSRF) vulnerability

Source: GitHub Advisory Database (reviewed) Critical CVE-2021-27312

Packages

EcosystemPackageAffectedFixed in
Packagist gleez/cms <= 1.2.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Server Side Request Forgery (SSRF) vulnerability in Gleez Cms 1.2.0, allows remote attackers to execute arbitrary code and obtain sensitive information via modules/gleez/classes/request.php.

References

External links from the advisory. They lead to third-party sites.