CVE-2022-31390: SSRF
Published Jun 9, 2022
·Updated
Jizhicms v2.2.5 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via the Update function in app/admin/c/TemplateController.php.
Affected Software
1 affected component
Jizhicms JIZHICMS=2.2.5
Event History
Jun 9, 2022
CVE Published
via MITRE·01:34 PM
Data Sourced
via MITRE·01:34 PM
Description
Frequently Asked Questions
1
What is CVE-2022-31390?
CVE-2022-31390 is a Server-Side Request Forgery (SSRF) vulnerability found in Jizhicms v2.2.5.
2
How severe is CVE-2022-31390?
CVE-2022-31390 has a severity rating of 9.1, which is considered critical.
3
How can I fix CVE-2022-31390?
To fix CVE-2022-31390, update Jizhicms to a version that contains the necessary security patches.
4
Is there any reference for CVE-2022-31390?
Yes, you can find more information about CVE-2022-31390 on the GitHub issue page: https://github.com/Cherry-toto/jizhicms/issues/75
5
What is the Common Weakness Enumeration (CWE) ID for CVE-2022-31390?
CVE-2022-31390 is associated with CWE-918, which is Server-Side Request Forgery (SSRF).