Skip to content
OpenAdvisories
Medium · 6.3 CVE-2023-1046 EUVD-2023-23337GHSA-g5wh-jvx7-8p9q

MuYuCMS getFile.html server-side request forgery

Published Feb 26, 2023 · Updated Aug 2, 2024 · Assigned by VulDB

Description

A vulnerability classified as critical has been found in MuYuCMS 2.2. This affects an unknown part of the file /admin.php/update/getFile.html. The manipulation of the argument url leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-221805 was assigned to this vulnerability.

Affected products

VendorProductAffectedFixed
— MuYuCMS 2.2 —

References