CVE-2022-28117
MEDIUM NUCLEINavigate CMS 2.9.4 - Server-Side Request Forgery via Feed Parameter
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2022-28117. PoCs published by cheshireca7, kimstars. A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit demonstrates an authenticated SSRF vulnerability in Navigate CMS 2.9.4 and earlier. It authenticates as a user, then abuses the cache feature to retrieve responses from arbitrary URLs, including local files.
Description
A Server-Side Request Forgery (SSRF) in feed_parser class of Navigate CMS v2.9.4 allows remote attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the feed parameter.
Exploits (3)
This exploit demonstrates an authenticated SSRF vulnerability in Navigate CMS 2.9.4 and earlier. It authenticates as a user, then abuses the cache feature to retrieve responses from arbitrary URLs, including local files.
This PoC exploits an authenticated SSRF vulnerability in Navigate CMS <= 2.9.4 by abusing the feed_parser class to force arbitrary requests. It includes authentication handling and response retrieval via cached files.
This PoC exploits an authenticated SSRF vulnerability in Navigate CMS 2.9.4 and earlier by abusing the cache feature to retrieve responses from internal resources. It includes login functionality and leverages the SSRF to fetch content from specified URLs (default: file:///etc/passwd).
Nuclei Templates (1)
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N