CVE-2018-1000138 | BDVDB-2026-98252 Detail

Description#

I, Librarian version 4.8 and earlier contains a SSRF vulnerability in "url" parameter of getFromWeb in functions.php that can result in the attacker abusing functionality on the server to read or update internal resources.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/mkucej/i-librarian/issues/120
https://github.com/mkucej/i-librarian/blob/9535753a84bc615b210802d4c9542db73368d984/functions.php#L811

Exploit#

No public exploit known

History#

Version 12018-03-23Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.