CVE-2022-27429: SSRF

Published Apr 25, 2022

Updated

Jizhicms v1.9.5 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via /admin.php/Plugins/update.html.

Affected Software

1 affected component

Jizhicms JIZHICMS=1.9.5

Event History

Apr 25, 2022

CVE Published

via MITRE·12:43 PM

Data Sourced

via MITRE·12:43 PM

Description

Frequently Asked Questions

What is CVE-2022-27429?

CVE-2022-27429 is a Server-Side Request Forgery (SSRF) vulnerability found in Jizhicms v1.9.5 through /admin.php/Plugins/update.html.

How severe is CVE-2022-27429?

CVE-2022-27429 has a severity rating of 9.8 out of 10, making it critical.

How can I fix CVE-2022-27429?

To fix CVE-2022-27429, it is recommended to update Jizhicms to a version that has addressed the SSRF vulnerability.

What is Server-Side Request Forgery (SSRF)?

Server-Side Request Forgery (SSRF) is a vulnerability that allows an attacker to make requests to other internal or external resources from the vulnerable server.

Where can I find more information about CVE-2022-27429?

You can find more information about CVE-2022-27429 at the following link: [https://github.com/Cherry-toto/jizhicms/issues/67](https://github.com/Cherry-toto/jizhicms/issues/67)