CVE-2017-12905 Server Side Request Forgery vulnerability in Vebto Pixie Image Editor 1.4 and 1.7 allows remote attackers to disclose information or execute arbitrary code via the url parameter to Launderer.php.
CriticalCVSS 10.0
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Server Side Request Forgery vulnerability in Vebto Pixie Image Editor 1.4 and 1.7 allows remote attackers to disclose information or execute arbitrary code via the url parameter to Launderer.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vebto pixie - image editor | = 1.4 | No fix listed |
| vebto pixie - image editor | = 1.7 | No fix listed |
References
- 20170921 Pixie image Editor SSRF vulnerability for CVE-2017-12905 mailing-list third-party-advisory