| 제목 | SeriaWei ZKEACMS v4.3 Non-blind SSRF |
|---|
| 설명 | The Proxy method in MediaController allows users to request the content of an arbitrary URL. Although this operation requires ViewMedia permission, once the attacker has the corresponding permissions, he can use this vulnerability to detect the company's intranet and attack the intranet services. |
|---|
| 원천 | ⚠️ https://github.com/August829/Yu/blob/main/58ead8e7e08bfb022.md |
|---|
| 사용자 | Yu_Bao (UID 89348) |
|---|
| 제출 | 2025. 09. 05. AM 04:31 (1 년도 ago) |
|---|
| 모더레이션 | 2025. 09. 15. AM 11:59 (10 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 323890 [ZKEACMS 4.3 MediaController.cs Proxy url 권한 상승] |
|---|
| 포인트들 | 17 |
|---|