CVE-2018-6029: SSRF

Published Jan 23, 2018

Updated

The copy function in application/admin/controller/Article.php in NoneCms 1.3.0 allows remote attackers to access the content of internal and external network resources via Server Side Request Forgery (SSRF), because URL validation only considers whether the URL contains the "csdn" substring.

Affected Software

1 affected component

5none Nonecms=1.3.0

Event History

Jan 23, 2018

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

Description

Data Sourced

via NVD·06:29 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2018-6029?

CVE-2018-6029 is a vulnerability that allows remote attackers to access the content of internal and external network resources via Server Side Request Forgery (SSRF) in NoneCms 1.3.0.

How severe is CVE-2018-6029?

CVE-2018-6029 has a severity rating of 7.5 (high).

How does CVE-2018-6029 affect NoneCms?

CVE-2018-6029 affects NoneCms version 1.3.0.

How can I fix CVE-2018-6029?

To fix CVE-2018-6029, upgrade NoneCms to a version that has fixed the vulnerability.

Where can I find more information about CVE-2018-6029?

More information about CVE-2018-6029 can be found at the following link: [http://blackwolfsec.cc/2018/01/23/Nonecms_ssrf/](http://blackwolfsec.cc/2018/01/23/Nonecms_ssrf/)