Description
I, Librarian version 4.8 and earlier contains a SSRF vulnerability in "url" parameter of getFromWeb in functions.php that can result in the attacker abusing functionality on the server to read or update internal resources.
Unscored
CVE-2018-1000138
EUVD-2018-1856GHSA-g3qf-pqh8-4q8m
I, Librarian version 4.8 and earlier contains a SSRF vulnerability in "url" parameter of getFromWeb in functions.php that can result in the…
Published Mar 23, 2018 · Updated Sep 16, 2024 · Assigned by mitre