CVE-2021-27312: Gleez Cms Server Side Request Forgery (SSRF) vulnerability

April 3, 2024

Server Side Request Forgery (SSRF) vulnerability in Gleez Cms 1.2.0, allows remote attackers to execute arbitrary code and obtain sensitive information via modules/gleez/classes/request.php.

References

gist.github.com/LioTree/8d10d123d31f50db05a25586e62a87ba
github.com/advisories/GHSA-7mxg-r76p-363g
github.com/gleez/cms
github.com/gleez/cms/issues/805
nvd.nist.gov/vuln/detail/CVE-2021-27312

Detect and mitigate CVE-2021-27312 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →