CVE-2022-41477

A security issue was discovered in WeBid <=1.2.2. A Server-Side Request Forgery (SSRF) vulnerability in the admin/theme.php file allows remote attackers to inject payloads via theme parameters to read files across directories.

Score

CVSS 3.1 9.1 Critical

Status

Modified - cve@mitre.org

Published

2022-10-14

Last modified

2025-05-14

Weaknesses

CWE-918

Affected products

• Webid (Webidsupport)

References

• https://github.com/zer0yu/CVE_Request/blob/master/Webid/WeBid_Path_Traversal.md