GHSA-7mxg-r76p-363g

Source

https://github.com/advisories/GHSA-7mxg-r76p-363g

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-7mxg-r76p-363g/GHSA-7mxg-r76p-363g.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-7mxg-r76p-363g

Aliases

CVE-2021-27312

Published

2024-04-03T06:30:48Z

Modified

2024-04-03T15:57:12.808561Z

Severity

9.0 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS Calculator

Summary

Gleez Cms Server Side Request Forgery (SSRF) vulnerability

Details

Server Side Request Forgery (SSRF) vulnerability in Gleez Cms 1.2.0, allows remote attackers to execute arbitrary code and obtain sensitive information via modules/gleez/classes/request.php.

Database specific

{
    "severity": "CRITICAL",
    "github_reviewed_at": "2024-04-03T15:34:31Z",
    "cwe_ids": [
        "CWE-918"
    ],
    "nvd_published_at": "2024-04-03T06:15:07Z",
    "github_reviewed": true
}

References

Affected packages

Packagist / gleez/cms

Package

Name: gleez/cms
Purl: pkg:composer/gleez/cms

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Last affected

1.2.0

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-7mxg-r76p-363g/GHSA-7mxg-r76p-363g.json"