CVSS base score
CVSS vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/AU:Y/R:U/V:D/RE:L/U:Green
What the vulnerability does
Server Side Request Forgery (SSRF) vulnerability in AdmirorFrames Joomla! extension in afGdStream.php script allows to access local files or server pages available only from localhost. This issue affects AdmirorFrames: before 5.0.
Explanation of Vulnerability in Simple Terms
AdmirorFrames before version 5.0 contains a server-side request forgery vulnerability that allows an attacker to make the site send HTTP requests to internal or external systems on the attacker's behalf. The vulnerability requires high attack complexity and authentication is enforced. Affected versions are 0 through 4.x.
What an attacker can do
Make the site send HTTP requests to internal systems or external URLs under attacker control.
Potential impact on your site
If AdmirorFrames is installed, attackers can probe internal infrastructure or exfiltrate data via forced requests.
Conditions required to exploit
Network access; no user interaction required; authentication enforced by the application.
Key dates
External resources
Related vulnerabilities
