Description
CSZCMS v1.3.0 allows attackers to execute a Server-Side Request Forgery (SSRF) which can be leveraged to leak sensitive data via a local file inclusion at /admin/filemanager/connector/.
Unscored
CVE-2022-28997
EUVD-2022-33427GHSA-px2q-6q9w-p7wc
CSZCMS v1.3.0 allows attackers to execute a Server-Side Request Forgery (SSRF) which can be leveraged to leak sensitive data via a local fi…
Published May 23, 2022 · Updated Aug 3, 2024 · Assigned by mitre