Vulnerabilities > CVE-2022-31386 - Server-Side Request Forgery (SSRF) vulnerability in Nbnbk Project Nbnbk 3
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
NONE Summary
A Server-Side Request Forgery (SSRF) in the getFileBinary function of nbnbk cms 3 allows attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the URL parameter.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |