CVE-2022-38931

Publication date

2022-09-20 19:58:59

Family

mitre

State

PUBLISHED

Description

A Server-Side Request Forgery (SSRF) in fetch_net_file_upload function of baijiacmsV4 v4.1.4 allows remote attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the url parameter.