Description
Kity Minder v1.3.5 was discovered to contain a Server-Side Request Forgery (SSRF) via the init function at ImageCapture.class.php.
Remediation
References
https://github.com/fex-team/kityminder/issues/345
Related Vulnerabilities
CVE-2021-41182 Vulnerability in maven package org.webjars.bowergithub.jquery:jquery-ui
CVE-2018-1002201 Vulnerability in maven package org.zeroturnaround:zt-zip
CVE-2022-21704 Vulnerability in npm package log4js
CVE-2020-26217 Vulnerability in maven package xstream:xstream
CVE-2020-7781 Vulnerability in npm package connection-tester