VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Apr 10, 2018· Updated Jun 17, 2026

CVE-2017-14323

CVE-2017-14323

Description

SSRF (Server Side Request Forgery) in getRemoteImage.php in Ueditor in Onethink V1.0 and V1.1 allows remote attackers to obtain sensitive information, attack intranet hosts, or possibly trigger remote command execution via the upfile parameter.

Affected products

2
  • Onethink/Onethinkinferred2 versions
    >=1.0,<=1.1+ 1 more
    • (no CPE)range: >=1.0,<=1.1
    • (no CPE)range: V1.0, V1.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.