CVE-2023-27160

HighCVSS 7.2/10Last modified Jul 9, 2026

Description

forem up to v2022.11.11 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /articles/{id}. This vulnerability allows attackers to access network resources and sensitive information via a crafted POST request.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-918

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://gist.github.com/b33t1e/6172286862a4486b5888f3cbbdc6316dThird Party Advisory
https://github.com/forem/foremProduct
https://notes.sjtu.edu.cn/s/MUUhEymt7Exploit, Third Party Advisory
https://gist.github.com/b33t1e/6172286862a4486b5888f3cbbdc6316dThird Party Advisory
https://github.com/forem/foremProduct
https://notes.sjtu.edu.cn/s/MUUhEymt7Exploit, Third Party Advisory
https://gist.github.com/b33t1e/6172286862a4486b5888f3cbbdc6316dThird Party Advisory

Timeline

Published: Mar 31, 2023
Last modified: Jul 9, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-271617.5Jellyfin up to v10.7.7 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /Repositories. This vulnerability al CVE-2023-271629.1openapi-generator up to v6.4.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/gen/clients/{language}.CVE-2023-271636.5request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/baskets/{name}. This vuln CVE-2023-271644.8An arbitrary file upload vulnerability in Halo up to v1.6.1 allows attackers to execute arbitrary code via a crafted .md file.CVE-2023-271676.5Suprema BioStar 2 v2.8.16 was discovered to contain a SQL injection vulnerability via the values parameter at /users/absence?search_month=1.CVE-2023-271689.8An arbitrary file upload vulnerability in Xpand IT Write-back Manager v2.3.1 allows attackers to execute arbitrary code via a crafted jsp fi CVE-2023-271696.5Xpand IT Write-back manager v2.3.1 uses a hardcoded salt in license class configuration which leads to the generation of a hardcoded and pre CVE-2023-27174.3The Groundhogg plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.7.9.8. This is due to mi CVE-2023-271707.5Xpand IT Write-back manager v2.3.1 allows attackers to perform a directory traversal via modification of the siteName parameter.CVE-2023-271729.1Xpand IT Write-back Manager v2.3.1 uses weak secret keys to sign JWT tokens. This allows attackers to easily obtain the secret key used to s CVE-2023-271789.8An arbitrary file upload vulnerability in the upload function of GDidees CMS 3.9.1 allows attackers to execute arbitrary code via a crafted CVE-2023-271797.5GDidees CMS v3.9.1 and lower was discovered to contain an arbitrary file download vulenrability via the filename parameter at /_admin/imgdow