Description

Kity Minder v1.3.5 was discovered to contain a Server-Side Request Forgery (SSRF) via the init function at ImageCapture.class.php.

Remediation

References

https://github.com/fex-team/kityminder/issues/345

Related Vulnerabilities

CVE-2018-20227 Vulnerability in maven package org.eclipse.rdf4j:rdf4j-util

CVE-2021-25929 Vulnerability in maven package org.opennms:opennms-webapp

CVE-2023-26119 Vulnerability in maven package net.sourceforge.htmlunit:htmlunit

CVE-2021-23663 Vulnerability in npm package sey

CVE-2019-15955 Vulnerability in npm package total.js

Severity

Critical

Classification

CWE-918 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Tags

Exploit Issue Tracking Third Party Advisory