CVE-2022-40357

n/a / n/a PUBLISHED

Description (CNA)

A security issue was discovered in Z-BlogPHP <= 1.7.2. A Server-Side Request Forgery (SSRF) vulnerability in the zb_users/plugin/UEditor/php/action_crawler.php file allows remote attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the source parameter.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://github.com/zblogcn/zblogphp/issues/336

ADP enrichment

CVE

No English description supplied.

https://github.com/zblogcn/zblogphp/issues/336

CISA-ADP

No English description supplied.

No references supplied.