high7.5
CVE-2019-9187
ikiwiki before 3.20170111.1 and 3.2018x and 3.2019x before 3.20190228 allows SSRF via the aggregate plugin.
Impact
ikiwiki before 3.20170111.1 and 3.2018x and 3.2019x before 3.20190228 allows SSRF via the aggregate plugin. The impact also includes reading local files via file: URIs.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ikiwiki | Ikiwiki | before 3.20170111.1 from 3.20190207 before 3.20190226 Versions 3.20180105, 3.20180228, 3.20180311 |