Vulnerabilities > CVE-2020-24140 - Server-Side Request Forgery (SSRF) vulnerability in Wcms 0.3.2

047910
CVSS 8.3 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
LOW
network
low complexity
wcms
CWE-918
NVD
Published: 2021-04-07
Updated: 2021-04-13

Summary

Server-side request forgery in Wcms 0.3.2 let an attacker send crafted requests from the back-end server of a vulnerable web application via the pagename parameter to wex/html.php. It can help identify open ports, local network hosts and execute command on local services.

Vulnerable Configurations

Part Description Count
Application
Wcms
1

Common Weakness Enumeration (CWE)

References