← Database

CVE-2022-38931

HIGH CVSS: 8.8 Published: 2022-09-20 Modified: 2026-06-17

Description

A Server-Side Request Forgery (SSRF) in fetch_net_file_upload function of baijiacmsV4 v4.1.4 allows remote attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the url parameter.

Affected Platforms

Baijiacms Project Baijiacms

Weakness Type

CWE-918, CWE-918

References