Server-Side Request Forgery in FUXA by an Unknown Vendor
CVE-2021-45851

7.5HIGH

Key Information:

Vendor

Frangoteam

Status
Fuxa
Vendor
CVE Published:
16 March 2022

What is CVE-2021-45851?

A server-side request forgery (SSRF) vulnerability in FUXA version 1.1.3 enables attackers to exploit the server's internal environment, allowing unauthorized access to sensitive data and potentially executing commands on the compromised server. This vulnerability poses a risk of significant exposure of internal services.

References

https://www.youtube.com/watch?v=JE1Kcq3iJpc
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.