Security Advisory

CVE-2018-1000138

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-03-23 21:00:00
Last updated 2024-09-16 20:58:08
Assigner mitre
State PUBLISHED

Description

I, Librarian version 4.8 and earlier contains a SSRF vulnerability in "url" parameter of getFromWeb in functions.php that can result in the attacker abusing functionality on the server to read or update internal resources.