GHSA-vx6p-q4gj-x6xx

    Dashboard / Vulnerabilities / GHSA-vx6p-q4gj-x6xx

    GHSA-vx6p-q4gj-x6xx

    Published: 24 May 2022Last Modified: 8 Nov 2023

    Summary: Camaleon CMS vulnerable to Server-Side Request Forgery

    Details: In Camaleon CMS, versions 2.1.2.0 through 2.6.0, are vulnerable to Server-Side Request Forgery (SSRF) in the media upload feature, which allows admin users to fetch media files from external URLs but fails to validate URLs referencing to localhost or other internal servers. This allows attackers to read files stored in the internal server.

    References: https://nvd.nist.gov/vuln/detail/CVE-2021-25972, https://github.com/owen2345/camaleon-cms/commit/5a252d537411fdd0127714d66c1d76069dc7e190, https://github.com/owen2345/camaleon-cms, https://github.com/rubysec/ruby-advisory-db/blob/master/gems/camaleon_cms/CVE-2021-25972.yml, https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25972

    Affected packages

    Package

    Name: camaleon_cms

    Purl: pkg:gem/camaleon_cms

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 2.1.2.0
    Fixed -2.6.0.1

    Affected versions

    2.1.2.0
    2.1.2.1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    GHSA-vx6p-q4gj-x6xx | CVE-DB