CVE-2023-2927: JIZHICMS TemplateController.php index server-side request forgery

Published May 27, 2023

Updated

A vulnerability was found in JIZHICMS 2.4.5. It has been classified as critical. Affected is the function index of the file TemplateController.php. The manipulation of the argument webapi leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-230082 is the identifier assigned to this vulnerability.

Affected Software

1 affected component

Jizhicms JIZHICMS=2.4.5

Event History

May 27, 2023

CVE Published

via MITRE·09:00 AM

Data Sourced

via MITRE·09:00 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-2927?

The severity of CVE-2023-2927 is classified as critical.

How does CVE-2023-2927 affect JIZHICMS 2.4.5?

CVE-2023-2927 affects the function index of the file TemplateController.php in JIZHICMS 2.4.5.

What is the impact of CVE-2023-2927?

CVE-2023-2927 allows for server-side request forgery, enabling remote attackers to launch attacks.

How can CVE-2023-2927 be exploited?

CVE-2023-2927 can be exploited remotely by manipulating the argument webapi.

Is there a fix available for CVE-2023-2927?

There is currently no known fix available for CVE-2023-2927. It is recommended to follow any vendor advisories or updates.