CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
What the vulnerability does
Server-Side Request Forgery (SSRF) vulnerability in Burhan Nasir Smart Auto Upload Images smart-auto-upload-images allows Server Side Request Forgery.This issue affects Smart Auto Upload Images: from n/a through <= 1.2.2.
Explanation of Vulnerability in Simple Terms
Smart Auto Upload Images versions 1.2.2 and earlier contain a server-side request forgery vulnerability. An authenticated user with low privileges can make the site send HTTP requests to internal or external systems on the attacker's behalf. The vulnerability affects the scope beyond the vulnerable component, potentially exposing internal network resources or allowing interaction with external services.
What an attacker can do
Make the site send HTTP requests to internal or external systems the attacker specifies.
Potential impact on your site
Authenticated attackers can probe your internal network, access internal services, or interact with external systems via your site.
Conditions required to exploit
Attacker must have a low-privilege authenticated account; no user interaction required.
Key dates
External resources
