← Database

CVE-2021-40604

CRITICAL CVSS: 9.1 Published: 2022-06-13 Modified: 2026-06-17

Description

A Server-Side Request Forgery (SSRF) vulnerability in IPS Community Suite before 4.6.2 allows remote authenticated users to request arbitrary URLs or trigger deserialization via phar protocol when generating class names dynamically. In some cases an exploitation is possible by an unauthenticated user.

Affected Platforms

Invisioncommunity Ips Community Suite

Weakness Type

CWE-918

References