提交 #647629: SeriaWei ZKEACMS v4.3 SSRF
| 标题 | SeriaWei ZKEACMS v4.3 SSRF |
|---|---|
| 描述 | The root cause of the vulnerability is that the Event Action system fully trusts administrator input and does not perform any verification of the URL when performing HTTP request operations |
| 来源 | ⚠️ https:/ |
| 用户 | Yu_Bao (UID 89348) |
| 提交 | 2025-09-04 12時19分 (1 年前) |
| 管理 | 2025-09-20 10時47分 (16 days later) |
| 状态 | 已接受 |
| VulDB条目 | 325119 [SeriaWei ZKEACMS 直到 4.3 Event Action System PendingTaskController.cs Edit Data 权限提升] |
| 积分 | 16 |