Unscored CVE-2017-12905 EUVD-2017-4429GHSA-v9qg-8jqw-q8xg

Server Side Request Forgery vulnerability in Vebto Pixie Image Editor 1.4 and 1.7 allows remote attackers to disclose information or execut…

Published Sep 25, 2017 · Updated Aug 5, 2024 · Assigned by mitre

Description

Server Side Request Forgery vulnerability in Vebto Pixie Image Editor 1.4 and 1.7 allows remote attackers to disclose information or execute arbitrary code via the url parameter to Launderer.php.

References

20170921 Pixie image Editor SSRF vulnerability for CVE-2017-12905 mailing-list