high8.6
CVE-2024-25187
Server Side Request Forgery (SSRF) vulnerability in 71cms v1.0.0, allows remote unauthenticated attackers to obtain sensitive information via getweather.html.
Impact
Server Side Request Forgery (SSRF) vulnerability in 71cms v1.0.0, allows remote unauthenticated attackers to obtain sensitive information via getweather.html.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xiaocheng-Keji | 71cms | Version 1.0 |