CVE-2023-48204: SSRF

Published Nov 15, 2023

Updated

An issue in PublicCMS v.4.0.202302.e allows a remote attacker to obtain sensitive information via the appToken and Parameters parameter of the api/method/getHtml component.

Affected Software

1 affected component

PublicCMS publiccms=4.0.202302.e

Event History

Nov 15, 2023

CVE Published

12:00 AM

Data Sourced

12:00 AM

Description

Frequently Asked Questions

What is CVE-2023-48204?

CVE-2023-48204 is an issue in PublicCMS v.4.0.202302.e that allows a remote attacker to obtain sensitive information.

How does CVE-2023-48204 affect PublicCMS?

CVE-2023-48204 affects PublicCMS v.4.0.202302.e by allowing a remote attacker to obtain sensitive information using the appToken and Parameters parameter of the api/method/getHtml component.

What is the severity of CVE-2023-48204?

The severity of CVE-2023-48204 is medium with a score of 6.5.

How can I fix CVE-2023-48204?

To fix CVE-2023-48204, it is recommended to update to a patched version of PublicCMS.

Where can I find more information about CVE-2023-48204?

You can find more information about CVE-2023-48204 at the following link: [GitHub issue](https://github.com/sanluan/PublicCMS/issues/77)