CVE-2018-18753

Typecho V1.1 allows remote attackers to send shell commands via base64-encoded serialized data, as demonstrated by SSRF.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2018-10-29

Last modified

2024-09-17

Weaknesses

CWE-918

Affected products

• Typecho (Typecho)

References

• https://github.com/wuzhicms/wuzhicms/issues/157