CVE-2018-14514: SSRF

Published Jul 23, 2018

Updated

An SSRF vulnerability was discovered in idreamsoft iCMS V7.0.9 that allows attackers to read sensitive files, access an intranet, or possibly have unspecified other impact.

Affected Software

1 affected component

icmsdev icms=7.0.9

Event History

Jul 23, 2018

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is CVE-2018-14514?

CVE-2018-14514 is an SSRF vulnerability in idreamsoft iCMS V7.0.9 that allows attackers to read sensitive files, access an intranet, or have other unspecified impact.

What is the severity of CVE-2018-14514?

The severity of CVE-2018-14514 is critical with a CVSS score of 9.8.

How does CVE-2018-14514 affect idreamsoft iCMS?

CVE-2018-14514 affects idreamsoft iCMS V7.0.9 by allowing attackers to read sensitive files, access an intranet, or have other unspecified impact.

Is there a fix for CVE-2018-14514?

Yes, updating idreamsoft iCMS to a version that is not affected or applying a patch provided by idreamsoft will fix the vulnerability.

Where can I find more information about CVE-2018-14514?

More information about CVE-2018-14514 can be found at the following link: https://github.com/idreamsoft/iCMS/issues/29.