CVE-2017-14323

N/A

Descripcion

SSRF (Server Side Request Forgery) in getRemoteImage.php in Ueditor in Onethink V1.0 and V1.1 allows remote attackers to obtain sensitive information, attack intranet hosts, or possibly trigger remote command execution via the upfile parameter.

Detalles CVE

Puntuacion CVSS v3.1N/A

Publicado4/10/2018

Ultima modificacion11/21/2024

Fuentenvd

Avistamientos honeypot0

Productos afectados

onethink:onethink

Debilidades (CWE)

CWE-918

Referencias

http://seclists.org/fulldisclosure/2018/Apr/16(cve@mitre.org)

http://seclists.org/fulldisclosure/2018/Apr/16(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.