PT-2026-41339 · Couchcms · Couchcms

Xxcdd · Publicado 2026-05-15 · Atualizado 2026-05-15 · CVE-2021-47958

Mitre

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

CouchCMS 2.2.1 contains a server-side request forgery vulnerability that allows authenticated attackers to make arbitrary HTTP requests by uploading malicious SVG files. Attackers can upload SVG files containing external entity references through the browse.php endpoint to access internal services and resources.

Exploit

Correção

SSRF

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

CVE-2021-47958

Produtos afetados

Couchcms

Referências · 4

• 🔥 https://exploit-db.com/exploits/49675 · Exploit
• https://github.com/CouchCMS/CouchCMS · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2021-47958 · Nota de Segurança
• https://vulncheck.com/advisories/couchcms-server-side-request-forgery-via-svg-upload · Nota