critical9.8
CVE-2021-27693
Server-side Request Forgery (SSRF) vulnerability in PublicCMS before 4.0.202011.b via /publiccms/admin/ueditor when the action is catchimage.
Impact
Server-side Request Forgery (SSRF) vulnerability in PublicCMS before 4.0.202011.b via /publiccms/admin/ueditor when the action is catchimage.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Publiccms | Publiccms | before 4.0.202011.b |