CyberRota Analysis
AI-GeneratedA vulnerability exists in WuzhiCMS versions up to 4.1.0, specifically in the Remote Image Fetch component, where improper handling of the source[] argument in the ckditor::saveRemote function can lead to server-side request forgery (SSRF). This flaw allows attackers to initiate remote exploits, potentially compromising the server's integrity and accessing internal resources. Organizations using WuzhiCMS should prioritize patching this vulnerability to mitigate the risk of unauthorized access and data exposure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw has been found in WuzhiCMS up to 4.1.0. The impacted element is the function ckditor::saveRemote of the file coreframe/app/attachment/index.php of the component Remote Image Fetch. This manipulation of the argument source[] causes server-side request forgery. The attack can be initiated remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.