| शीर्षक | SveltyCMS 0.0.6 Server-Side Request Forgery |
|---|
| विवरण | The app contains a file upload endpoint at http://yourip:5173/mediagallery/upload-media which is accessible to all authenticated users. The endpoint has a remote upload feature for uploading media when given a URL. The feature states that "each line must be a public http(s) URL" but this is not true. Internal resources can be requested, which is an SSRF vulnerability.
This allows attackers to access services which are meant to be internal only, such as management software and cloud metadata services. The impact is increased by the fact that the response is uploaded as media, allowing an attacker to observe the response to their request. |
|---|
| स्रोत | ⚠️ https://github.com/SveltyCMS/SveltyCMS/commit/05b4f9efeb79e9d72a693232334d7529687f896f |
|---|
| उपयोगकर्ता | HLever (UID 100450) |
|---|
| सबमिशन | 22/08/2026 12:20 AM (28 दिन पहले) |
|---|
| संयम | 18/09/2026 10:27 AM (27 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 407423 [SveltyCMS 0.0.6 File Upload Endpoint upload-media अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|