PT-2022-20727

CVE-2022-31390

·

Published

2022-06-09

·

Updated

2022-06-15

Description by

CVSS 3.1
9.1
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions Jizhicms version 2.2.5
Description A Server-Side Request Forgery (SSRF) issue was found in the Update function within the TemplateController.php file, located at app/admin/c/. This allows for potential exploitation.
Recommendations For Jizhicms version 2.2.5, consider disabling the Update function in the TemplateController.php file as a temporary workaround until a patch is available. Restrict access to the TemplateController.php file to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-918: Server-Side Request Forgery (SSRF)
Related identifiers
CVE-2022-31390
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com