critical9.8
CVE-2019-11574
An issue was discovered in Simple Machines Forum (SMF) before release 2.0.17.
Impact
An issue was discovered in Simple Machines Forum (SMF) before release 2.0.17. There is SSRF related to Subs-Package.php and Subs.php because user-supplied data is used directly in curl calls.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Simplemachines | Simple Machine Forum | before 2.0.17 |