PT-2022-18804 · Jspxcms · Jspxcms

Published 2022-05-04 · Updated 2022-05-12 · CVE-2022-28090

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Jspxcms version 10.2.0

Description The issue allows attackers to execute a Server-Side Request Forgery (SSRF) via the API endpoint "/cmscp/ext/collect/fetch url.do" with the url parameter. This can potentially lead to unauthorized access to internal resources.

Recommendations For Jspxcms version 10.2.0, as a temporary workaround, consider restricting access to the "/cmscp/ext/collect/fetch url.do" API endpoint to minimize the risk of exploitation. Avoid using the url parameter in this endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2022-28090

Affected Products

Jspxcms

References · 4

• 🔥 https://gitee.com/jspxcms/Jspxcms/issues/I4ZKDR · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-28090 · Security Note
• https://osv.dev/vulnerability/CVE-2022-28090 · Vendor Advisory
• https://t.me/cvenotify/29688 · Telegram Post