Skip to content
OpenAdvisories
Critical · 9.1 CVE-2021-30108 EUVD-2021-1322GHSA-gc45-j3m5-8qfq

Server-Side Request Forgery in Feehi CMS

Published May 24, 2021 · Updated Aug 3, 2024 · Assigned by mitre

Description

Feehi CMS 2.1.1 is affected by a Server-side request forgery (SSRF) vulnerability. When the user modifies the HTTP Referer header to any url, the server can make a request to it.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist feehi/cms <= 2.1.1 — GHSA-gc45-j3m5-8qfq

References