Skip to content

CVE-2018-19601 Rhymix CMS 1.9.8.1 allows SSRF via an index.php?module=admin&act=dispModuleAdminFileBox SVG upload.

CriticalCVSS 9.1 EPSS 1.4%
Published
Updated
Exploit status
No public exploit known

Description

Rhymix CMS 1.9.8.1 allows SSRF via an index.php?module=admin&act=dispModuleAdminFileBox SVG upload.

Affected products

ProductAffected versionsFixed in
Rhymix = 1.9.8.1 No fix listed

References

  • github.com exploit issue-tracking patch third-party-advisory
  • github.com exploit third-party-advisory