CVE-2018-13790

A Server Side Request Forgery (SSRF) vulnerability in tools/files/importers/remote.php in concrete5 8.2.0 can lead to attacks on the local network and mapping of the internal network, because of URL functionality on the File Manager page.

Score

CVSS 3.1 7.2 High

Status

Modified - cve@mitre.org

Published

2018-07-09

Last modified

2024-08-05

Weaknesses

CWE-918

Affected products

• Concrete Cms (Concretecms)

References

• https://hackerone.com/reports/243865