CVE-2022-41496: SSRF
Published Oct 13, 2022
·Updated
iCMS v7.0.16 was discovered to contain a Server-Side Request Forgery (SSRF) via the url parameter at admincp.php.
Affected Software
1 affected component
idreamsoft iCMS=7.0.16
Event History
Oct 13, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2022-41496?
CVE-2022-41496 is a vulnerability in iCMS v7.0.16 that allows Server-Side Request Forgery (SSRF) attacks.
2
How severe is CVE-2022-41496?
CVE-2022-41496 has a severity rating of 9.8, which is classified as critical.
3
How does CVE-2022-41496 work?
CVE-2022-41496 allows an attacker to send requests from the server to another internal or external server, potentially accessing sensitive information or exploiting vulnerabilities.
4
Which version of iCMS is affected by CVE-2022-41496?
iCMS version 7.0.16 is affected by CVE-2022-41496.
5
How can I fix CVE-2022-41496?
To fix CVE-2022-41496, update iCMS to a version that includes a patch for the SSRF vulnerability, and ensure that user-supplied URL parameters are properly validated and restricted.