CVE-2021-40186

Katalog CVE

CVSS 7.5 · High EPSS 1,1%

Kerentanan Server-Side Request Forgery (SSRF) pada dnnsoftware dotnetnuke. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

The AppCheck research team identified a Server-Side Request Forgery (SSRF) vulnerability within the DNN CMS platform, formerly known as DotNetNuke. SSRF vulnerabilities allow the attacker to exploit the target system to make network requests on their behalf, allowing a range of possible attacks. In the most common scenario, the attacker exploits SSRF vulnerabilities to attack systems behind the firewall and access sensitive information from Cloud Provider metadata services.

Rincian

Terbit di NVD

2 Juni 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-918: Server-Side Request Forgery (SSRF)

EPSS (30 hari)

1,1% peluang dieksploitasi; lebih tinggi dari 65,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://appcheck-ng.com/dnn-cms-server-side-request-forgery-cve-2021-40186 exploit · advisory pihak ketiga