critical9.1
CVE-2022-31386
A Server-Side Request Forgery (SSRF) in the getFileBinary function of nbnbk cms 3 allows attackers to force the application to make arbitrary requests via inje…
Impact
A Server-Side Request Forgery (SSRF) in the getFileBinary function of nbnbk cms 3 allows attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the URL parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nbnbk Project | Nbnbk | Version 3 |