An issue was discovered in YzmCMS 5.8. There is a SSRF vulnerability in the background collection management that allows arbitrary file read.
References
Link | Resource |
---|---|
https://github.com/yzmcms/yzmcms/issues/53 | Exploit Issue Tracking Third Party Advisory |
Configurations
Information
Published : 2021-06-03 14:15
Updated : 2021-06-09 10:13
NVD link : CVE-2020-35970
Mitre link : CVE-2020-35970
JSON object : View
CWE
CWE-918
Server-Side Request Forgery (SSRF)
Products Affected
yzmcms
- yzmcms