Description (CNA)
A flaw has been found in Shibby Tomato 1.28. The affected element is the function send of the file usr/sbin/miniupnpd of the component SUBSCRIBE Call Handler. This manipulation causes server-side request forgery. The attack may be initiated remotely. This project is superseded by FreshTomato. This vulnerability only affects products that are no longer supported by the maintainer.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Shibby / Tomato | affected 1.28 |
CWE
CWE-918
References
- https://vuldb.com/vuln/367154
- https://vuldb.com/vuln/367154/cti
- https://vuldb.com/submit/818237
- https://gitee.com/Fengyi-Wang/CVE/issues/IJD8SS
ADP enrichment
No English description supplied.