What is GHSA-gc45-j3m5-8qfq?

GHSA-gc45-j3m5-8qfq is a security advisory published by GitHub Security Advisories with Critical severity. Server-Side Request Forgery in Feehi CMS

Which CVE IDs does GHSA-gc45-j3m5-8qfq cover?

GHSA-gc45-j3m5-8qfq covers the following CVE IDs: CVE-2021-30108. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-gc45-j3m5-8qfq?

GHSA-gc45-j3m5-8qfq has a CVSS v3 base score of 9.1, published by GitHub Security Advisories.

Which products are affected by GHSA-gc45-j3m5-8qfq?

GHSA-gc45-j3m5-8qfq affects 1 product, including: composer/feehi/cms:\u003c= 2.1.1.

GHSA-gc45-j3m5-8qfqCriticalCVSS 9.1

Server-Side Request Forgery in Feehi CMS

Vendor

GitHub Security Advisories

Published

June 8, 2021

Last Modified

July 5, 2023

🔗 CVE IDs covered (1)

CVE-2021-30108 →

📋 Description

Feehi CMS 2.1.1 is affected by a Server-side request forgery (SSRF) vulnerability. When the user modifies the HTTP Referer header to any url, the server can make a request to it.

🎯 Affected products1

composer/feehi/cms:<= 2.1.1

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2021-30108
https://github.com/liufee/cms/issues/57
https://github.com/liufee/cms/issues/57#issuecomment-1230070460
https://github.com/liufee/cms/commit/d45cb9cb26d6f5ef491fa2c7d87ac7f26091bd7c
https://github.com/advisories/GHSA-gc45-j3m5-8qfq