October Cms
Monthly
Server-side request forgery (SSRF) in October CMS 4.3.4 and earlier allows unauthenticated remote attackers to bypass the validateExternalImageHost protection in System/Classes/ResizeImages.php by supplying a crafted IPv6-mapped IPv4 host, causing the server to fetch attacker-controlled or internal URLs. Publicly available exploit code exists (no CISA KEV confirmation of active exploitation), and the assessed impact is a largely blind SSRF with Low confidentiality, integrity and availability impact, so real-world severity depends on what internal services or cloud metadata endpoints the server can reach. October CMS 4.3.5 resolves the bypass; the issue is genuine but should be treated as low-to-moderate priority.
Server-side request forgery (SSRF) in October CMS 4.3.4 and earlier allows unauthenticated remote attackers to bypass the validateExternalImageHost protection in System/Classes/ResizeImages.php by supplying a crafted IPv6-mapped IPv4 host, causing the server to fetch attacker-controlled or internal URLs. Publicly available exploit code exists (no CISA KEV confirmation of active exploitation), and the assessed impact is a largely blind SSRF with Low confidentiality, integrity and availability impact, so real-world severity depends on what internal services or cloud metadata endpoints the server can reach. October CMS 4.3.5 resolves the bypass; the issue is genuine but should be treated as low-to-moderate priority.