Beveiligingsadvies

CVE-2022-41477

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-10-14 00:00:00
Laatst bijgewerkt 2025-05-14 15:17:55
Toegewezen door mitre
CVSS-score 9.1
Status PUBLISHED

Beschrijving

A security issue was discovered in WeBid <=1.2.2. A Server-Side Request Forgery (SSRF) vulnerability in the admin/theme.php file allows remote attackers to inject payloads via theme parameters to read files across directories.