PT-2026-8343 · Cskefu · Cskefu
CVSS v2.0
6.5
Medium
| Vector | AV:N/AC:L/Au:S/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
cskefu versions up to 8.0.1
Description
A security issue exists in cskefu that allows for server-side request forgery. The problem is related to the processing of the file
com/cskefu/cc/controller/resource/MediaController.java within the Endpoint component. Manipulating the url argument can trigger the issue. The attack can be initiated remotely. The exploit has been publicly disclosed.Recommendations
Versions prior to 8.0.1 should be updated.
Exploit
Fix
SSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Cskefu