CVE-2021-27312
published 2024-04-03CVE-2021-27312: Server Side Request Forgery (SSRF) vulnerability in Gleez Cms 1.2.0, allows remote attackers to execute arbitrary code and obtain sensitive information via…
PriorityP348critical9.4CVSS 3.1
AVNACLPRNUINSUCHIHAL
EPSS
1.03%
59.4th percentile
Server Side Request Forgery (SSRF) vulnerability in Gleez Cms 1.2.0, allows remote attackers to execute arbitrary code and obtain sensitive information via modules/gleez/classes/request.php.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gleez | cms | 0 – 1.2.0 | — |
| gleezcms | gleez_cms | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Gleez Cms Server Side Request Forgery (SSRF) vulnerability
osv·2024-04-03
CVE-2021-27312 [CRITICAL] Gleez Cms Server Side Request Forgery (SSRF) vulnerability
Gleez Cms Server Side Request Forgery (SSRF) vulnerability
Server Side Request Forgery (SSRF) vulnerability in Gleez Cms 1.2.0, allows remote attackers to execute arbitrary code and obtain sensitive information via modules/gleez/classes/request.php.
GHSA
Gleez Cms Server Side Request Forgery (SSRF) vulnerability
ghsa·2024-04-03
CVE-2021-27312 [CRITICAL] CWE-918 Gleez Cms Server Side Request Forgery (SSRF) vulnerability
Gleez Cms Server Side Request Forgery (SSRF) vulnerability
Server Side Request Forgery (SSRF) vulnerability in Gleez Cms 1.2.0, allows remote attackers to execute arbitrary code and obtain sensitive information via modules/gleez/classes/request.php.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-04-03
Published