Medium severity6.3NVD Advisory· Published Mar 25, 2023· Updated Jun 17, 2026

CVE-2023-1634

Description

A vulnerability was found in OTCMS 6.72. It has been classified as critical. Affected is the function UseCurl of the file /admin/info_deal.php of the component URL Parameter Handler. The manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224016.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Otcms/Otcms3 versions
cpe:2.3:a:otcms:otcms:6.72:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:otcms:otcms:6.72:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: = 6.72

Patches

Vulnerability mechanics

References

github.com/BigTiger2020/2023-1/blob/main/ssrf/ssrf.mdnvdExploitThird Party Advisory
vuldb.comnvdThird Party Advisory
vuldb.comnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.410
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000