Security Advisory

CVE-2021-39497

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-09-07 19:57:08
Last updated 2024-08-04 02:06:42
Assigner mitre
State PUBLISHED

Description

eyoucms 1.5.4 lacks sanitization of input data, allowing an attacker to inject a url to trigger blind SSRF via the saveRemote() function.

← Browse all CVEs View on cve.org ↗