Vulnerability Details CVE-2024-25187
Server Side Request Forgery (SSRF) vulnerability in 71cms v1.0.0, allows remote unauthenticated attackers to obtain sensitive information via getweather.html.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 74.1%
CVSS Severity
CVSS v3 Score 8.6
References
Products affected by CVE-2024-25187
-
cpe:2.3:a:xiaocheng-keji:71cms:1.0