Vulnerabilities > CVE-2018-14858 - Server-Side Request Forgery (SSRF) vulnerability in Icmsdev Icms
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
NONE Availability impact
NONE Summary
An SSRF vulnerability was discovered in idreamsoft iCMS before V7.0.11 because the remote function in app/spider/spider_tools.class.php does not block private and reserved IP addresses such as 10.0.0.0/8. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-14514.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |