| शीर्षक | MuYuCMS 2.7 CWE-918: Server-Side Request Forgery (SSRF) |
|---|
| विवरण | A Server-Side Request Forgery (SSRF) vulnerability exists in MuYuCMS version 2.7 within the get_url_content method of Base.php. The function retrieves content from user-supplied URLs after verifying they start with "http", but fails to restrict access to internal network resources. The vulnerability allows authenticated attackers to make the server send arbitrary HTTP requests to internal systems, bypassing network security controls and accessing restricted internal services. |
|---|
| स्रोत | ⚠️ https://gist.github.com/b1uel0n3/d06cd0f5d62b2c4991dc39cefabfde02 |
|---|
| उपयोगकर्ता | b1uel0n3 (UID 93016) |
|---|
| सबमिशन | 27/11/2025 07:12 AM (10 महीनों पहले) |
|---|
| संयम | 16/12/2025 02:18 PM (19 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 221805 [MuYuCMS 2.2 getFile.html url अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|