Jspxcms v10.2.0 allows attackers to execute a Server-Side Request Forgery (SSRF) via /cmscp/ext/collect/fetch_url.do?url=.

Published May 4, 2022 · Updated Aug 3, 2024 · Assigned by mitre