← Back

Cszcms

cszcms

Vendor: Cszcms • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-28997
1Cszcms
1Cszcms
Nov 21, 2024
May 23, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
CSZCMS v1.3.0 allows attackers to execute a Server-Side Request Forgery (SSRF) which can be leveraged to leak sensitive data via a local file inclusion at /admin/filemanager/connector/.