Skip to content
OpenAdvisories
Unscored CVE-2018-13790 EUVD-2018-5728GHSA-hxh5-f5fj-62c3

A Server Side Request Forgery (SSRF) vulnerability in tools/files/importers/remote.php in concrete5 8.2.0 can lead to attacks on the local …

Published Jul 9, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

A Server Side Request Forgery (SSRF) vulnerability in tools/files/importers/remote.php in concrete5 8.2.0 can lead to attacks on the local network and mapping of the internal network, because of URL functionality on the File Manager page.

References