CVE-2023-1046

Published February 26th, 2023

View on NVD ↗

CVSS v3

6.3

MEDIUM

CVSS v2

6.5

MEDIUM

Affected

PROJECT

Description

A vulnerability classified as critical has been found in MuYuCMS 2.2. This affects an unknown part of the file /admin.php/update/getFile.html. The manipulation of the argument url leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-221805 was assigned to this vulnerability.

MuYuCMS/MuYuCMS

MuYuCMS基于ThinkPHP5.1开发的一套轻量级开源内容管理系统,专注为公司企业、个人站长提供快速建站提供解决方案。

GitHub