Vulnerabilities > CVE-2022-38931 - Server-Side Request Forgery (SSRF) vulnerability in Baijiacms Project Baijiacms 4.1.4
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
A Server-Side Request Forgery (SSRF) in fetch_net_file_upload function of baijiacmsV4 v4.1.4 allows remote attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the url parameter.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |