CVE-2018-18867 - An SSRF issue was discovered in tecrail Responsive FileManager 9.13.4 via the upload.php url parameter

Back Back to CVE browser

HIGH

An SSRF issue was discovered in tecrail Responsive FileManager 9.13.4 via the upload.php url parameter

Published Oct 31, 2018

8.6

HIGH

CVSS 3.0

EPSS 1.50%

Description

An SSRF issue was discovered in tecrail Responsive FileManager 9.13.4 via the upload.php url parameter. NOTE: this issue exists because of an incomplete fix for CVE-2018-15495.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-918

SSRF

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-10578
Advisory
https://github.com/trippo/ResponsiveFilemanager/issues/506
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-10578		Advisory
https://github.com/trippo/ResponsiveFilemanager/issues/506		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Oct 31, 2018

Updated Aug 5, 2024

Reserved Oct 31, 2018

Link CVE-2018-18867

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-18867

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Oct 31, 2018

Updated Aug 5, 2024

Link EUVD-2018-10578

GitHub

No data