CVE-2017-20157

A vulnerability was found in Ariadne Component Library up to 2.x. It has been classified as critical. Affected is an unknown function of the file src/url/Url.php. The manipulation leads to server-side request forgery. Upgrading to version 3.0 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-217140.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cna@vuldb.com

Published

2022-12-31

Last modified

2024-08-05

Weaknesses

CWE-918

Affected products

• Component Library (Ariadne)
• Ariadne Component Library (Ariadne-cms)

References

• https://github.com/Ariadne-CMS/arc-web/commit/1feb1cc11e6c9f218408f15f53f537ea0d788656
• https://github.com/Ariadne-CMS/arc-web/releases/tag/3.0
• https://vuldb.com/?ctiid.217140
• https://vuldb.com/?id.217140