| शीर्षक | iteachyou Dreamer CMS 4.1.3 Server-Side Request Forgery |
|---|
| विवरण | A Server-Side Request Forgery (SSRF) vulnerability exists in the iframe embedding functionality in the article editor (编辑文章) of Dreamer CMS 4.1.3. This vulnerability arises because the application allows authenticated backend users to embed iframes with arbitrary src values using the article editor (编辑文章). An authenticated attacker can exploit this functionality to force the server to make unauthorized requests to external targets, potentially exposing sensitive information or enabling further attacks. |
|---|
| स्रोत | ⚠️ https://github.com/cydtseng/Vulnerability-Research/blob/main/dreamercms/ServerSideRequestForgery-ArticleEditorIframe.md |
|---|
| उपयोगकर्ता | vastzero (UID 78767) |
|---|
| सबमिशन | 10/02/2025 05:10 PM (1 वर्ष पहले) |
|---|
| संयम | 21/02/2025 11:38 AM (11 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 296494 [iteachyou Dreamer CMS 4.1.3 /admin/archives/edit editorValue/answer/content क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 0 |
|---|