~ / search / GHSA-gc45-j3m5-8qfq

GHSA-gc45-j3m5-8qfq

Server-Side Request Forgery in Feehi CMS

Source: GitHub Advisory Database (reviewed) Critical CVE-2021-30108

Packages

EcosystemPackageAffectedFixed in
Packagist feehi/cms <= 2.1.1 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Feehi CMS 2.1.1 is affected by a Server-side request forgery (SSRF) vulnerability. When the user modifies the HTTP Referer header to any url, the server can make a request to it.

References

External links from the advisory. They lead to third-party sites.