CVE-2022-31393

Jizhicms v2.2.5 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via the Index function in app/admin/c/PluginsController.php.

Score

CVSS 3.1 9.1 Critical

Status

Modified - cve@mitre.org

Published

2022-06-09

Last modified

2024-08-03

Weaknesses

CWE-918

Affected products

• Jizhicms (Jizhicms)

References

• https://github.com/Cherry-toto/jizhicms/issues/76