Critical · 9.1 CVE-2022-31830 EUVD-2022-6124GHSA-q56h-x9h5-q53c

Server-Side Request Forgery in kityminder

Published Jun 9, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

Kity Minder v1.3.5 was discovered to contain a Server-Side Request Forgery (SSRF) via the init function at ImageCapture.class.php.

Ecosystem	Package	Affected	Fixed	Record
npm	kityminder	<= 1.3.5	—	GHSA-q56h-x9h5-q53c