| タイトル | Antabot White-Jotter 0.2.2 Server-Side Request Forgery |
|---|
| 説明 | A Server-Side Request Forgery (SSRF) vulnerability exists in the article cover URL specification functionality of Antabot White-Jotter version 0.2.2. This vulnerability arises because the application allows users to define arbitrary URLs using the article editor to fetch article cover images. An attacker can exploit this functionality to force the server to make unauthorized requests to internal services or external targets, potentially exposing sensitive information or enabling further attacks. |
|---|
| ソース | ⚠️ https://github.com/cydtseng/Vulnerability-Research/blob/main/white-jotter/ServerSideRequestForgery-ArticleCoverURL.md |
|---|
| ユーザー | vastzero (UID 78767) |
|---|
| 送信 | 2024年12月19日 17:02 (2 年 ago) |
|---|
| モデレーション | 2024年12月29日 13:29 (10 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 289765 [Antabot White-Jotter 迄 0.2.2 Article Editor /admin/content/editor articleCover 特権昇格] |
|---|
| ポイント | 20 |
|---|