CVE-2022-31393: SSRF
Published Jun 9, 2022
·Updated
Jizhicms v2.2.5 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via the Index function in app/admin/c/PluginsController.php.
Affected Software
1 affected component
Jizhicms JIZHICMS=2.2.5
Event History
Jun 9, 2022
CVE Published
via MITRE·01:34 PM
Data Sourced
via MITRE·01:34 PM
Description
Frequently Asked Questions
1
What is CVE-2022-31393?
CVE-2022-31393 is a Server-Side Request Forgery (SSRF) vulnerability in Jizhicms v2.2.5.
2
How severe is CVE-2022-31393?
CVE-2022-31393 has a severity rating of 9.1 (critical).
3
How does CVE-2022-31393 affect Jizhicms v2.2.5?
CVE-2022-31393 allows for SSRF attacks via the Index function in app/admin/c/PluginsController.php in Jizhicms v2.2.5.
4
How can I fix CVE-2022-31393 in Jizhicms v2.2.5?
To fix CVE-2022-31393 in Jizhicms v2.2.5, update to a version that includes the necessary security patches.
5
Where can I find more information about CVE-2022-31393?
You can find more information about CVE-2022-31393 at the following reference: [https://github.com/Cherry-toto/jizhicms/issues/76](https://github.com/Cherry-toto/jizhicms/issues/76)