Skip to content
OpenAdvisories
Unscored CVE-2022-31386 EUVD-2022-52904GHSA-23x2-p68q-c69p

A Server-Side Request Forgery (SSRF) in the getFileBinary function of nbnbk cms 3 allows attackers to force the application to make arbitra…

Published Jun 9, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

A Server-Side Request Forgery (SSRF) in the getFileBinary function of nbnbk cms 3 allows attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the URL parameter.

References