| عنوان | Antabot White-Jotter 0.2.2 Server-Side Request Forgery |
|---|
| الوصف | A Server-Side Request Forgery (SSRF) vulnerability exists in the article cover URL specification functionality of Antabot White-Jotter version 0.2.2. This vulnerability arises because the application allows users to define arbitrary URLs using the article editor to fetch article cover images. An attacker can exploit this functionality to force the server to make unauthorized requests to internal services or external targets, potentially exposing sensitive information or enabling further attacks. |
|---|
| المصدر | ⚠️ https://github.com/cydtseng/Vulnerability-Research/blob/main/white-jotter/ServerSideRequestForgery-ArticleCoverURL.md |
|---|
| المستخدم | vastzero (UID 78767) |
|---|
| ارسال | 19/12/2024 05:02 PM (2 سنوات منذ) |
|---|
| الاعتدال | 29/12/2024 01:29 PM (10 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 289765 [Antabot White-Jotter حتى 0.2.2 Article Editor /admin/content/editor articleCover تجاوز الصلاحيات] |
|---|
| النقاط | 20 |
|---|