CVE-2022-31386

A Server-Side Request Forgery (SSRF) in the getFileBinary function of nbnbk cms 3 allows attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the URL parameter.

Score

CVSS 3.1 9.1 Critical

Status

Modified - cve@mitre.org

Published

2022-06-09

Last modified

2024-08-03

Weaknesses

CWE-918

Affected products

• Nbnbk (Nbnbk Project)

References

• https://github.com/Fanli2012/nbnbk/issues/5