Skip to main content

PHP CVE-2026-4623

| EUVD-2026-14696 MEDIUM
Server-Side Request Forgery (SSRF) (CWE-918)
2026-03-24 VulDB
PHP SSRF
5.5
CVSS 4.0 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

8
CVSS changed
Apr 29, 2026 - 01:11 NVD
6.9 (MEDIUM) 5.5 (MEDIUM)
Severity Changed
Apr 24, 2026 - 16:37 NVD
HIGH MEDIUM
CVSS changed
Apr 24, 2026 - 16:37 NVD
7.3 (HIGH) 6.9 (MEDIUM)
PoC Detected
Mar 24, 2026 - 15:53 vuln.today
Public exploit code
EUVD ID Assigned
Mar 24, 2026 - 02:45 euvd
EUVD-2026-14696
Analysis Generated
Mar 24, 2026 - 02:45 vuln.today
Patch released
Mar 24, 2026 - 02:45 nvd
Patch available
CVE Published
Mar 24, 2026 - 01:39 nvd
HIGH 7.3

DescriptionCVE.org

A security vulnerability has been detected in DefaultFuction Jeson-Customer-Relationship-Management-System up to 1b4679c4d06b90d31dd521c2b000bfdec5a36e00. This affects an unknown function of the file /api/System.php of the component API Module. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The identifier of the patch is f76e7123fe093b8675f88ec8f71725b0dd186310/98bd4eb07fa19d4f2c5228de6395580013c97476. It is suggested to install a patch to address this issue.

AnalysisAI

A Server-Side Request Forgery (SSRF) vulnerability exists in DefaultFuction Jeson-Customer-Relationship-Management-System affecting versions up to commit 1b4679c4d06b90d31dd521c2b000bfdec5a36e00. The vulnerability resides in the /api/System.php file where the 'url' parameter can be manipulated to force the server to make arbitrary requests. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Send HTTP request to /api/System.php
Exploit
Inject malicious URL in url parameter
Execution
Trigger server-side request forgery
Impact
Access internal resources or services
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Remote unauthenticated attacker can exploit SSRF via the 'url' parameter in DefaultFunction Jeson-Customer-Relationship-Management-System API Module (/api/System.php). … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS score of 7.3 (High) reflects significant risk with network-based attack vector (AV:N), low complexity (AC:L), and no authentication required (PR:N). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An unauthenticated remote attacker crafts a malicious HTTP request to the vulnerable /api/System.php endpoint, manipulating the 'url' parameter to point to internal network resources such as http://192.168.1.100/admin or cloud metadata services at http://169.254.169.254/latest/meta-data/. The server processes this request and returns sensitive information like AWS credentials, internal service configurations, or database connection strings. …
Remediation Update to a version containing the security patch by applying commit f76e7123fe093b8675f88ec8f71725b0dd186310 or 98bd4eb07fa19d4f2c5228de6395580013c97476 available at https://github.com/DefaultFuction/Jeson-Customer-Relationship-Management-System/commit/f76e7123fe093b8675f88ec8f71725b0dd186310. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours: Identify all systems running affected versions (up to commit 1b4679c4d06b90d31dd521c2b000bfdec5a36e00) and assess exposure to internet-facing traffic. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

More from same product – last 7 days

CVE-2026-49952 CRITICAL POC
9.3 Jun 15

Authentication bypass in Discuz! X5.0 releases 20260320 through 20260501 allows unauthenticated remote attackers to acce
CVE-2026-49954 HIGH POC
8.6 Jun 15

Authenticated remote code execution in Discuz! X5.0 releases 20260320 through 20260501 allows administrators to chain a

CVE-2026-49768 CRITICAL
9.8 Jun 15

Unauthenticated PHP Object Injection in the Happyforms WordPress plugin (versions <= 1.26.13) allows remote attackers to
CVE-2026-27053 CRITICAL
9.8 Jun 15

Unauthenticated PHP Object Injection in the Broadcast Live Video WordPress plugin (versions prior to 7.1.3) allows remot
CVE-2026-49104 CRITICAL
9.8 Jun 15

Unauthenticated PHP object injection in the WordPress plugin 'Integration for Keap/Infusionsoft and Contact Form 7, WPFo

Share

CVE-2026-4623 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy