CVE-2022-31386 Information

Description

A Server-Side Request Forgery (SSRF) in the getFileBinary function of nbnbk cms 3 allows attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the URL parameter.

Reference

https://github.com/Fanli2012/nbnbk/issues/5