PT-2018-12558 · Idreamsoft · Icms

Published 2018-07-23 · Updated 2018-09-17 · CVE-2018-14514

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions idreamsoft iCMS version 7.0.9

Description A Server-Side Request Forgery (SSRF) issue was found, allowing attackers to read sensitive files or access an intranet, potentially leading to other unspecified impacts.

Recommendations For idreamsoft iCMS version 7.0.9, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2018-14514

Affected Products

Icms

References · 3

• 🔥 https://github.com/idreamsoft/iCMS/issues/29 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-14514 · Security Note
• https://osv.dev/vulnerability/CVE-2018-14514 · Vendor Advisory