← All advisories

Critical severity9.8NVD Advisory· Published Sep 2, 2022· Updated Jun 17, 2026

CVE-2021-27693

CVE-2021-27693

Description

Server-side Request Forgery (SSRF) vulnerability in PublicCMS before 4.0.202011.b via /publiccms/admin/ueditor when the action is catchimage.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Publiccms/Publiccms3 versions
cpe:2.3:a:publiccms:publiccms:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:publiccms:publiccms:*:*:*:*:*:*:*:*range: <4.0.202011.b
- (no CPE)
- (no CPE)range: <202011.b

Patches

Vulnerability mechanics

References

2

github.com/sanluan/PublicCMS/commit/0f4c4872914b6a71305e121a7d9a19c07cde0338nvdPatchThird Party Advisory
github.com/sanluan/PublicCMS/issues/51nvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.