Submit #645805: magicblack MacCMSv10 v2025.1000.4050 SSRFinfo

Titelmagicblack MacCMSv10 v2025.1000.4050 SSRF
BeschreibungThe root cause is that the back-end code receives a user-controllable URL parameter and, without performing strict security validation, directly uses this URL to initiate a network request on behalf of the server itself.
Quelle⚠️ https://github.com/August829/Yu/blob/main/58ead8e7e08bfb018.md
Benutzer
 Yu Bao (UID 88956)
Einreichung02.09.2025 16:45 (vor 8 Monaten)
Moderieren13.09.2025 19:29 (11 days later)
StatusAkzeptiert
VulDB Eintrag323832 [Magicblack MacCMS 2025.1000.4050 API cjurl erweiterte Rechte]
Punkte17

Might our Artificial Intelligence support you?

Check our Alexa App!