UBUNTU-CVE-2019-9187
- Source
- https://ubuntu.com/security/CVE-2019-9187
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2019/UBUNTU-CVE-2019-9187.json
- JSON Data
- https://api.osv.dev/v1/vulns/UBUNTU-CVE-2019-9187
- Upstream
- Published
- 2019-06-05T18:29:00Z
- Modified
- 2025-07-18T16:45:03Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- Ubuntu - low
- Summary
- [none]
- Details
-
ikiwiki before 3.20170111.1 and 3.2018x and 3.2019x before 3.20190228 allows SSRF via the aggregate plugin. The impact also includes reading local files via file: URIs.
- References
-
- https://ubuntu.com/security/CVE-2019-9187
- https://ikiwiki.info/security/#cve-2019-9187
- https://www.openwall.com/lists/oss-security/2019/02/28/1
- http://source.ikiwiki.branchable.com/?p=source.git;a=commitdiff;h=e7b0d4a
- http://source.ikiwiki.branchable.com/?p=source.git;a=commitdiff;h=67543ce
- http://source.ikiwiki.branchable.com/?p=source.git;a=commitdiff;h=d283e4c
- http://source.ikiwiki.branchable.com/?p=source.git;a=commitdiff;h=9a275b2
- https://www.cve.org/CVERecord?id=CVE-2019-9187