CVE-2020-21653

Myucms v2.2.1 contains a server-side request forgery (SSRF) in the component \controller\index.php, which can be exploited via the sj() method.

Score

CVSS 3.1 9.1 Critical

Status

Modified - cve@mitre.org

Published

2021-10-06

Last modified

2024-08-04

Weaknesses

CWE-918

Affected products

• Myucms (Myucms Project)

References

• https://github.com/lolipop1234/XXD/issues/5