CVEvulnerability
CVE-2021-45851
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-03-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-918
Description
A Server-Side Request Forgery (SSRF) attack in FUXA 1.1.3 can be carried out leading to the obtaining of sensitive information from the server's internal environment and services, often potentially leading to the attacker executing commands on the server.
Affected configurations
• frangoteam fuxa 1.1.3
Related
Weakness · CWE (1)
- CWE-918 Server-Side Request Forgery weakness
References
- https://www.youtube.com/watch?v=JE1Kcq3iJpc Exploit, Third Party Advisory
- https://www.youtube.com/watch?v=JE1Kcq3iJpc Exploit, Third Party Advisory