← Database

CVE-2022-31386

CRITICAL CVSS: 9.1 Published: 2022-06-09 Modified: 2026-06-17

Description

A Server-Side Request Forgery (SSRF) in the getFileBinary function of nbnbk cms 3 allows attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the URL parameter.

Affected Platforms

Nbnbk Project Nbnbk

Weakness Type

CWE-918

References