CVE-2024-25187

HIGH

71cms 1.0.0 - Unauthenticated Server-Side Request Forgery via getweather.html

Title source: llm
STIX 2.1

Description

Server Side Request Forgery (SSRF) vulnerability in 71cms v1.0.0, allows remote unauthenticated attackers to obtain sensitive information via getweather.html.

References (2)

Core 2

Scores

CVSS v3 8.6
EPSS 0.0066
EPSS Percentile 46.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-918
Status published
Products (1)
xiaocheng-keji/71cms 1.0
Published Apr 02, 2024
Tracked Since Feb 18, 2026