| عنوان | SeriaWei ZKEACMS v4.3 Non-blind SSRF |
|---|
| الوصف | The Proxy method in MediaController allows users to request the content of an arbitrary URL. Although this operation requires ViewMedia permission, once the attacker has the corresponding permissions, he can use this vulnerability to detect the company's intranet and attack the intranet services. |
|---|
| المصدر | ⚠️ https://github.com/August829/Yu/blob/main/58ead8e7e08bfb022.md |
|---|
| المستخدم | Yu_Bao (UID 89348) |
|---|
| ارسال | 05/09/2025 04:31 AM (1 سنة منذ) |
|---|
| الاعتدال | 15/09/2025 11:59 AM (10 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 323890 [ZKEACMS 4.3 MediaController.cs Proxy url تجاوز الصلاحيات] |
|---|
| النقاط | 17 |
|---|