A Server-Side Request Forgery (SSRF)... CVE-2024-27561

- AV AC AU C I A
发布： 2024-03-05
修订： 2025-01-21

A Server-Side Request Forgery (SSRF) in the installUpdateThemePluginAction function of WonderCMS v3.1.3 allows attackers to force the application to make arbitrary requests via injection of crafted URLs into the installThemePlugin parameter.

0%

漏洞利用/PoC

暂无可用Exp或PoC

受影响的平台与产品

当前有1条受影响产品信息