제출 #647629: SeriaWei ZKEACMS v4.3 SSRF
| 제목 | SeriaWei ZKEACMS v4.3 SSRF |
|---|---|
| 설명 | The root cause of the vulnerability is that the Event Action system fully trusts administrator input and does not perform any verification of the URL when performing HTTP request operations |
| 원천 | ⚠️ https:/ |
| 사용자 | Yu_Bao (UID 89348) |
| 제출 | 2025. 09. 04. PM 12:19 (1 년도 ago) |
| 모더레이션 | 2025. 09. 20. AM 10:47 (16 days later) |
| 상태 | 수락 |
| VulDB 항목 | 325119 [SeriaWei ZKEACMS 까지 4.3 Event Action System PendingTaskController.cs Edit Data 권한 상승] |
| 포인트들 | 16 |